Khoindvn
Khoindvn is a service/website that offers pre-signed applications with freshly, new leaked enterprise certificates.
This is a highly popular service for lots of users who do not have access to computers or PC's.
Prerequisites
- iPad, iPhone or Apple TV running iOS 14 or above
Setting up DNS
- Visit https://khoindvn.io.vn
- Slightly below at the home page, there should be two white boxes. Tap the button that says "Install DNS Profile".
- Open the Settings application and follow the on-screen instructions.
• Your DNS will be responsible for blocking Apple's domains from reaching your website. This way, revokes & blacklists are less likely to happen.
Downloading Certificates
- Visit https://khoindvn.io.vn
- Slightly below at the home page, there should be two white boxes. Tap the button that says "Download Certificate".
- Put it in a memorable location. You will be required to use this later.
Installing KSign/ESign
- Visit https://khoindvn.io.vn
- Scroll down to KSign Bypass Revoke.
- Tap on the first KSign you see.
- You will be redircted to a different website. Tap "Install", and then tap "Install".
• We recommend using KSign as it is maintained & is designed as a 'cleaner' ESign UI. However, it is up for preference.
Knowing your errors
- Open Settings.
- Go to General.
- Scroll to VPN & Device Management.
- Open it and you will find a developer application.
- Click on it. Once opened, click "Verify App".
- Open KSign.
- If not there already, navigate to the Files section at the bottom of your screen.
- At the top right of your screen, tap the + button.
- Import the certificate zip file.
- Once imported, the certificate should be in your Files section. Tap on it, and find "Extract". Click it.
- A new folder will appear called "Certs-Khoindvn".
- • Navigate to Certs-Khoindvn>Certs-Khoindvn>KSignCert.
- Tap on any certificate, and click "Import Certificate".
- Once the certificate is imported, you can now install apps.
- In the KSign app, navigate to the Library section.
- At the top right of your screen, tap the + to import your .ipa file.
- Once imported, it should be visible in the App Library. Tap on the app, and tap Sign & Install.
- Under Signing, select the certificate you imported.
- Tap "Start Signing".
- Open ESign. Ensure you are the Files tab of the navigation.
- At the top right corner, tap the hamburger icon.
- Select Import.
- Import all the certificate files.
- Once the certificate is imported into your Files section, tap on each file (.p12 and .mobileprovision)
- Open ESign. Ensure you are the Files tab of the navigation.
- At the top right corner, tap the hamburger icon.
- Select Import.
- Import your .ipa file.
- Once the .ipa file is in the Files section, tap on it and click "Import App Library".
- At the bottom of your screen, navigate to the Apps section.
- Ensure you are at the Unsigned tab. Tap on the ipa, tap Signature, then tap Signature again.
- You should be prompted to install the app. Tap Install.
- Navigate to the Settings tab at the bottom of your ESign screen.
- Tap "Wifi".
- Copy the LAN HTTP address & paste into your browser.
- Once pasted, you should now be able to sign apps in your browser.
• "The app integrity cannot be verified."
This means that the certificate is revoked. You cannot do anything to fix this error.
• "An internet connection is required.."
This means that you are blacklisted only from that specific certificate. If you are on iOS 17.0 - 18.0.1, you can remove the blacklist. Removing it requires a computer.
• Crashing after launching an app
Apps crashing can a result of a lot of things, but in this context, it is mainly due to a revoked certificate. You cannot do anything to fix this error.
Although it may not say it is revoked, sometimes app launch errors do not appear correctly.
Knowing if the certificate is valid
• If opening the app prompts an error message: "The developer is not trusted", you are good to proceed.
Verifying Application
Please select the signer you are using.
Adding our certificates
• If using ESign, navigate to ESignCert instead of KSignCert.
• It is highly recommended you select the certificate you used to initially install KSign.
Installing Apps
• The process may take a while depending on your app size. Once finished, you will get a prompt. Tap "Install".
Adding our Certificate
• We must add our certificate to ESign in order sign other applications.
Signing your first app
• Before proceeding, please find your .ipa file you want to install.
Online Signing Mode (iOS 17.6.1+)
• This step is only optional for users running iOS 17.6 & lower.