Xiaomi smartphone owners often encounter incomprehensible notifications in security settings or system warnings mentioning a “CC certificate” or “root certificate.” To the average user, these terms may seem complicated technical details, but they are the foundation of protecting your personal data. Understanding what a CC certificate is will help you distinguish the system component from a potential threat.
The CS stands for Certificate Authority, a trusted organization or software component that verifies digital signatures. When your Xiaomi connects to a bank website or logs in to an application, it verifies digital signatures against a trusted certificate database, and if a match is found, the connection is considered secure.
Android, which runs the MIUI or HyperOS shell, has a strict hierarchy of trust, system certificates are pre-installed by the manufacturer and are responsible for most standard functions, but the user can add new root certificates on their own, which is sometimes necessary for corporate networks or specific software, but can also carry risks.
How to use the Android and MIUI trust system
The mechanism of certificates on Xiaomi devices is based on the public key infrastructure (PKI). When you open a site with HTTPS, the server sends your phone its certificate. The system checks whether it is signed by a trusted center. If there is no such signatory in the list of trusted centers (TS) the browser will issue a warning about an insecure connection.
It is important to distinguish between system certificates and user certificates: the first are sewn into firmware and protected from accidental removal, the second are installed by the owner or applications. Deleting the system certificate can cause critical Google services or bank applications to fail, whereas deleting the user certificate often solves security problems.
The MIUI has its own security checks that can block the installation of suspicious certificates or alert you to attempts to implement them through the Security Manager, an additional layer of protection that should be considered when diagnosing network problems.
💡
If the application requires you to install a certificate to work with, make sure the source of the file is absolutely reliable, as this gives you access to your encrypted traffic.
Where to find and how to view certificates on Xiaomi
The path to managing certificates in modern versions of Android and MIUI may vary slightly depending on the system version, but the overall logic remains the same. To view the list of trusted centers, you need to go to the security settings. Usually the path is: Settings → Passwords and security → Privacy → Encryption and credentials.
In this section, you'll see the separation between System and User certificates, and in the second tab, the most common hiding places are objects that are installed by third-party applications or manually, and if you see entries you don't know here, that's a good thing to look at.
For a deeper analysis, you can use an engineering menu or special application managers, but standard system tools are usually enough for a basic check. Pay attention to the dates of validity: if the certificate expired or, conversely, is too long for temporary access, this can be a sign of an anomaly.
Why do I install user certificates?
There are several legitimate reasons why your Xiaomi might have a new root certificate, most often in an enterprise environment where you have a new root certificate. IT-The company's department monitors the traffic of employees to ensure the security of the data, in which case the network administrator provides a configuration file or profile for installation.
Another common reason is the use of specialized application debugging software (such as Charles Proxy or Fiddler) developers install their CC to intercept and analyze network requests for applications in the process of creating. HTTPS-traffic impossible.
But there is a malicious script, and malware can try to put its certificate at the root of the trust to carry out a Man-in-the-Middle attack, in which case an attacker can theoretically read your traffic even if it's protected by HTTPS. That's why controlling the user certificate list is so important.
☑️ Security check of certificates
Security risks and threats
⚠️ Warning: Having an unknown root certificate in the system gives the owner of this certificate full control over your encrypted traffic, through which you can intercept passwords, correspondence and bank card data.
If you have someone else's CS installed on your device without your knowledge, it's a critical vulnerability. Unlike a normal virus that just steals data, the certificate allows you to do it in real time, even inside secure applications, unless they use additional protection methods (certificate pinning).
Often, these certificates appear after installing applications from unreliable sources (not from Google Play or GetApps). Some modified versions of popular programs require installing their certificate to bypass license or advertising checks, but the price of such “free” is your privacy.
Also beware of public Wi-Fi networks, which, when connected, can redirect you to an authorization page that requires a profile setup. Never agree to install configuration profiles or certificates from unknown networks.
What is Certificate Pinning?
Instructions: How to remove the certificate of the CS
If you find a suspicious or unnecessary certificate, it must be removed.The deletion process on Xiaomi is simple enough, but requires permissions to access system security settings. First, go along the path: Settings → Passwords and Security → Privacy → Encryption and credentials → User Certificates.
In the list that opens, select the unnecessary certificate. The system will request proof of your identity: you will need to enter a pattern lock, PIN-A code or fingerprint is a measure of protection against the accidental removal of important system components.
After confirmation, click the “Delete” or “Clear All” button if you want to reset the entire list of user certificates, the system will warn of the consequences, after which the certificate will be permanently deleted from the storage.
| Action. | System certificates | User certificates |
|---|---|---|
| Removal | Impossible without Root. | Available to the user |
| Impact on the system | Critical (network errors) | Minimum (failures in 1 annex) |
| Source | MIUI/Android firmware | Installation manually or by applications |
| Necessity | Tall. | Only for special tasks. |
After removal, it is recommended to restart the device so that the changes take effect finally and all services have updated their security caches.
💡
Deleting a user certificate is a secure operation that often resolves security alerts and connection errors.
Reset encryption settings and credentials
In cases where a specific certificate cannot be deleted or the list appears corrupted, you can use the full reset encryption settings feature, which returns the credential store to factory status by removing all user certificates.
You can find this feature in the same menu: Settings → Passwords and Security → Privacy → Encryption and credentials → Reset settings. Please note that this action will not affect your personal files, photos or contacts, but will delete all saved Wi-Fi passwords and Bluetooth pairings, as they are also protected by encryption keys.
Use this method if you suspect that the system has left “tails” from remote applications or malware. After reset, you will have to re-enter passwords from Wi-Fi networks, but you will be sure of the cleanliness of the key storage.
⚠️ Before resetting encryption settings, make sure to remember passwords from your Wi-Fi networks and accounts, as automatic authorization may stop working.