How to Remove Certificate Authority (CS) Certificate from Xiaomi Phone: Complete Guide

Why Removing CS Certificates on Xiaomi Needs Caution

Certificates of Certification Authority (CS) on Xiaomi smartphones (including Redmi models, POCO and Mi) manage the trust of websites, VPN, Installation of these is routine for IT professionals, but deletion can lead to unexpected consequences, from blocking access to work mail to completely losing communication with the servers of banking applications. This is especially critical for devices used in enterprise environments, where certificates are often installed through a network of devices. MDM-Solutions: Mobile Device Management).

Unlike custom certificates (which can be removed in a couple of clicks), root certificates are often integrated into the system section /system/etc/security/cacerts and require superuser rights (root) or special ADB commands. Moreover, on Xiaomi with MIUI 12-14 firmware, some certificates are protected by Android Enterprise policies, which makes it difficult to remove them without resetting.

Before you start, answer the key question: which certificate do you want to remove?

  • 🔐 Corporate Certificate (established by the administrator through MDM, For example, access to internal resources of the company).
  • 🌐 Self-signed certificate (created to test web services or local area networks).
  • ⚠️ Suspicious certificate (detected by antivirus or after connecting to public Wi-Fi).
  • 📱 System certificate MIUI (Built into firmware, removal may disrupt Xiaomi services).
📊 Why you should delete the CS certificate on Xiaomi?
The device has ceased to be a corporate
Errors when connecting to Wi-Fi/VPN
Suspicion of malicious certificate
Application testing
Other

Preparation: What to do before removal

Incorrectly deleting certificates can result in loss of network access, sync errors (like Google Account), or even locking your device into corporate systems.

  1. Back up your data. Use Settings → About Phone → Backup or third-party tools like Swift Backup. It’s especially important to save:

Check the dependent applications.

Settings → Applications

Microsoft Outlook

Cisco AnyConnect

1C:Enterprise

Make sure you have administrator rights (if required).

  • 🔧 Root access (for modification) /system).
  • 🖥️ ADB-Access (if removed via command line).
  • 📱 Developer Mode (includes through Settings) → The phone. → Version. MIUI — tap 7 times).

If the certificate is not displayed in this menu, it means:

  • 🔒 It is set as a system (root or root required). ADB).
  • 🏢 It's managed through MDM-Policy (you need to delete the device profile in Settings) → Accounts. → Working profile).
  • 🛠️ It is damaged (try resetting the security settings in Settings). → System system → Resetting settings → Resetting Wi-Fi, Mobile Network and Bluetooth).