How to disable the certificate of the CS on Xiaomi: a guide

Xiaomi’s current MIUI-enclosed smartphones and the new HyperOS feature a multi-stage security system that actively uses CC certificates to verify the authenticity of applications and network connections. In most cases, this feature works unobtrusively to the user, providing protection against malware and phishing attacks. However, developers, testers and advanced users often face the need to deactivate this verification to properly work debugging tools or specific software.

Disabling certificate verification may be required when installing applications from unknown sources that are not digitally signed, or when using traffic sniffers to analyze network packets. It is important to understand that manipulation of system certificates carries certain risks, and should only be performed with full confidence in your actions. In this article, we will discuss in detail how to circumvent protection, work with superuser rights and the nuances of setting up the development environment.

Before you make any changes, you need to be aware that you are temporarily reducing your device's security, and that completely disabling signature verification allows you to install modified versions of system applications, which is not possible in standard mode. We'll look at both software methods through the developer menu and deeper file system interventions that require root rights.

Why is it necessary to disable certificate verification

The main reason users are looking for a way to disable the CC certificate checker is to install apps that haven’t been officially moderated in the Google Play or GetApps store. APK-files, if their digital signature does not match the already installed version of the program or if the signature is missing at all.

Additionally, application developers often use traffic sniffers like Charles Proxy or Fiddler to debug network queries, and these tools require embedding their own root certificate into a trusted system storage. Without disabling standard security checks or installing user CA-certificate, encrypted HTTPS traffic will remain unavailable for analysis, as the application will reject the connection to the proxy server.

⚠️ Note: By disabling signature verification, you allow the system to install applications from any authors, which can cause the device to become infected with viruses, identity theft, or operating system instability.

It is also critical for those who are interested in modifying system files or installing custom recavators, and in such cases, the standard bootloader and system partition verification procedure can prevent the modified software from running. Understanding ADB and access rights is a key success factor in these operations.

📊 Why do you want to disable certificate verification?
Installation of modified applications
Debugging of network traffic (sniffing)
Developing own applications
Just for the experiment.

Activation of the developer mode and debugging via USB

The first step to any deep setup is to activate the hidden menu for developers. Without this section, most of the switches we need will not be available. The process is standard for all Android devices, but in the shell MIUI has its own peculiarities associated with increased security aggression.

First, you need to go to the Settings menu. → About the phone and find the line Version MIUI. You need to press this line quickly. 7-10 Once in a row, until a pop-up notice that you have become a developer appears, and then a new option will appear in the main settings menu, in the Additional section, For developers.

Inside this menu, you need to find and activate the USB Debugging Switch. The system will alert you to the risks, we agree. Next, you should find the Installation via USB and also turn it on. Here Xiaomi will require an account binding and a SIM card, as well as the mobile Internet enabled to check the status of the device for locks.

  • 📱 Go to Settings. → About the phone and tap according to the version MIUI before the activation message appears.
  • 🔌 In the menu For developers, include toggles Debugging by USB and Installation through USB.
  • 📡 Make sure your device is connected to a mobile network, not just Wi-Fi, to pass a security check.
  • ⚙️ When connecting to the computer, select the mode of operation. USB File transfer (MTP).

It is important to note that without activating these functions, the team ADB (Android Debug Bridge) will not run, and you will not be able to send commands to the device from your computer.This is a fundamental stage without which further manipulation is impossible. USB Driver and platform SDK Platform-Tools.

☑️ Verification of readiness for modification

Done: 0 / 4

Using ADB to change security settings

The most secure and common method of working with system parameters without obtaining root rights is the use of the ADB toolkit. This method allows you to send commands directly to the system, bypassing the graphical interface, and change global security settings, including those related to application verification.

First, connect your smartphone to your computer through a high-quality USB-Open the command line or terminal in the tool folder ADB And you type in the connection check command: adb devices. You'll see a request for debugging permission on your phone screen -- make sure you tick Always allow from that computer and click OK.

To disable application verification during installation, you can use the following command, which changes the value of the global parameter:

adb shell settings put global verifier_verify_adb_installs 0

This command tells Android that when installing apps via ADB, no additional verification is required through Google Play Protect services. However, completely ignoring signatures often requires changing deeper settings, which may require root rights or the use of specialized modules.

⚠️ Attention: Teams ADB It can have irreversible consequences if you use it incorrectly, only enter commands that you fully understand. A syntax error can lead to a cyclic reboot).

There is also a command to disable signature verification when updating apps, which developers often need:

adb shell pm install --bypass-low-target-sdk-block package_name.apk

Using the --bypass-low-target-sdk-block flag allows you to install applications that target older versions of the API, which is usually blocked by modern versions of Android.This is a special case of circumvention of the limitations associated with compatibility, but it demonstrates the flexibility of the ADB toolkit.

Working with root rights and Magisk modules

For users who need full certificate management, having superuser rights (Root) is almost a prerequisite. On Xiaomi devices, root access is usually achieved through unlocking the bootloader and installing a modified boot image with the Magisk patch.

Once Magisk is successfully installed and rooted, modules that can change the behavior of the system on the fly without affecting the system partition directly become available to the user. One of the most popular solutions is the Always Trust User Certs module, or analogues that force user certificates to be added to the system repository of trusted roots.

The installation process of the module is as follows: download ZIP-The module archive, open the Magisk app, go to the Modules section and click Install from storage. Once the device is restarted, the changes will take effect. This allows applications that verify the presence of a system certificate (for example, banking applications or corporate clients) to work with user-generated applications. CA.

  • 🔓 Unlock the bootloader through the official website of Xiaomi Unlock Tool.
  • 🛠️ Install a custom Recovery (TWRP) or patch boot.img via Magisk.
  • 📦 Download the module for working with certificates in format ZIP.
  • ✅ Activate the module in the Magisk menu and reboot.

It is important to understand that root rights can trigger some security applications, and that banking and anti-cheat games can refuse to run. To circumvent this restriction, Magisk needs to enable Zygisk and configure the Denilist, hiding root rights from specific applications.

What is Zygisk and why is it needed?
Zygisk is a Magisk implementation running on the Zygote process, which is responsible for running all applications in Android.This allows modules to penetrate application processes more deeply and effectively hide root rights from detection systems such as Google Play Integrity API.> Configure user certificates of security If your goal is not so much to disable checks as to add your own trusted root certificate (for example, for corporate network or debugging), then MIUI has a regular, albeit limited mechanism. User certificates are placed by default in a separate storage that is not considered to be a trusted file extension. Then go to Settings → Passwords and Security → Privacy → Encryption and credentials → Install from storage. The system will ask you to set a password for the store of credentials. Once installed, the certificate will appear in the trusted list, but, as mentioned, without root rights, it will be in the user section. To transfer the certificate to the system storage (/system/etc/security/cacerts/) without root rights, you can use virtual spaces such as VirtualXposed or Taichi. These applications create an isolated environment where you can run the desired software with already implemented certificates, emulating the rights of the system. Method Needs Root Complexity Efficiency ADB commands No Medium Partial Magisk modules Yes High Complete Virtual Environments No Medium Only for applications in a container System edits Yes Very High Complete (risks) When working with certificates, always check the source of their receipt. Installing a certificate from an unknown vendor can allow third parties to intercept your traffic, even if it is protected by the protocol. HTTPS. Certificate Authority is the foundation of trust online, and compromising this level on a device is equivalent to handing over apartment keys to strangers. Possible problems and ways to solve them: In the process of modifying security settings, Xiaomi users often face a number of specific problems. One of the most common is resetting debugging settings after a reboot or blocking the Installation function through a reboot. USB timer. The system may require waiting for a few seconds or minutes before reactivating, which is a measure of protection against automatic scripts. Another problem is the conflict of Android versions and old applications. Even with the signature check disabled, the application may not start due to API incompatibility. In this case, it helps to use compatibility modes or search for updated versions of the software. It is also worth remembering that some MIUI system applications can block the operation of modified software, considering it a threat. If after making changes, the phone began to behave unstable, permanent security notifications appeared or applications fly out immediately after launch, it is recommended to reset the settings before you save all the important information. 🔄 Reset network settings: Settings → Connection and sharing → Reset Wi-Fi, Mob Networks and Bluetooth. 🗑️ Remove newly installed user certificates from the repository. 🚫 Turn off the developer mode if it is not used constantly. 📲 Check for system updates that may contain security patches. If the device gets into a bootloop cycle after installing Magisk modules, you need to boot into Recovery mode (clamping the power and volume button) and remove the problem module through the file manager or ADB Sideload, it'll make the phone work again without a full flashing. ⚠️ Note: If you can’t log out of the developer menu or settings continue to reset, it’s possible your device is locked by the operator or has regional firmware restrictions (Global vs China) ROM). 💡The stability of the system after modification depends on the compatibility of the installed modules and the version. MIUI. Always check the comments on modules before installing. Frequently asked questions (FAQ) Is it safe to keep the debugging on at all times? USB? Continuously included debugging USB It reduces the security of the device, especially if you charge the phone in public places or connect it to unfamiliar computers.Attacker with physical access to the device can gain full control of the file system. It is recommended to include this function only for the duration of the work? In most regions, official unlocking of the bootloader on Xiaomi devices cancels the manufacturer's warranty obligations, especially if the failure is software or is associated with overheating / combustion of components that can be interpreted as the result of improper overclocking or modification of the software. However, in some countries, consumer protection laws may override the manufacturer's policy. Can you disable certificate verification without a computer? Fully disable system verification of signatures without using a computer and ADB is almost impossible on modern versions of Android. Mobile applications-terminals require rights, obtaining which also often involves the use of a PC. The only option without root - the use of the manufacturer's policy: "Certaxation is not even a high risk" This is because the application checks the certificate system, and the user certificates are in a separate, less privileged repository. To make the application see the certificate, it needs to be moved to the system partition, which requires root rights, or use special Magisk modules that emulate the certificate in the system. How to return all security settings to their original state? To return to the factory security settings, you just need to perform a full reset (Wipe Data) through the Recovery menu. This will remove all user certificates, rights (unless you re-review the system partition) and developer settings. You can also manually remove the certificate from the root mode.