OmniSign — On-Device iOS Sideloading

1

Install Anti-Revoke DNS (Required First)

Blocks Apple OCSP checks so enterprise certificates don't get revoked.

📥 Download DNS Profile (WSF madNS)

Installation Steps:

Tap Download DNS Profile above → tap Allow.
Open Settings → Profile Downloaded → Install.
Go to Settings → General → VPN & Device Management → DNS.
Crucial: Select OmniSign WSF Anti-Revoke DNS (do NOT leave on Automatic).

2

Install OmniSign (Choose a Working Slot)

Tap a slot below to install. If one slot says "Integrity could not be verified", tap another slot until it installs.

💡 How rotation works: Apple occasionally revokes individual certs. If Slot 1 fails on your device, simply tap Slot 2, 3, or 4. Once installed, trust it in Settings → VPN & Device Management.

⚡️ OmniSign (HSBC Bank Cert) Native OmniSign iOS App • Signed with HSBC ⚡️ OmniSign (Simcere Cert) Native OmniSign iOS App • Signed with Simcere ⚡️ AltLoad Slot 1: BOC China Active Enterprise (AppID: Wemeet) ⚡️ AltLoad Slot 2: HSBC Bank Active Enterprise (Exp: 2027) ⚡️ AltLoad Slot 3: China Telecom Active Enterprise ⚡️ AltLoad Slot 4: Vietnam Electricity Active Enterprise (Exp: 2026)

📥 Download Rubber .IPA • 📥 Download BOC .IPA

3

Permanent Mode (Never Revoked)

How to make your sideloaded apps permanent once OmniSign is installed:

Install LocalDevVPN from the App Store.
Open OmniSign → Certificates & Pairing.
Sign in with your Apple ID to generate a personal development certificate.
Your apps will now refresh automatically in the background without revokes or a computer.