Skip to main content

KSign/ESign Tutorial (Recommended)

Video Tutorials for KSign:​

Written Tutorials for KSign:​

Read KSign Troubleshooting if you have any issues.​

Preparation​

If you don't want to use Khoindvn (just use it, it's safe), read the "KSign Method without Khoindvn" section.

  1. Delete your current version of Delta Roblox (if you already have Delta via Direct Install). Turn your VPN off if you have one on (if you're stupid and don't know how to, delete it instead).
  2. Go to https://khoindvn.io.vn on Safari. Do not go to https://khoindvn.com.

⚠️ Ignore all pop-ups/redirects (such as ones that say you have a virus)! If you get redirected, just swipe back (or go to the Khoindvn tab) to return to Khoindvn.
⚠️ If you cannot access Khoindvn, read KSign Troubleshooting.

  1. Scroll down, click on Download DNS Profile and press Allow. If the button does not work, click here.
  2. Go to Settings and click on Profile Downloaded (or General → VPN and Device Management). Install the Khoindvn DNS Profile. Enter your password if prompted.
  3. If required, go to Settings → General → About → Certificate Trust Settings and toggle the switch on for AAA Certificates.
  4. On your device's home screen, a "khoindvn" bookmark will appear. You do not need to install KSigns/ESigns from it!
  5. Go back to https://khoindvn.io.vn. Scroll down to ESign/KSign (do not click on Delta VN), and click one of them (such as XL AXIATA, PT TBK). It will ask you to "Open in iTunes". However, it will not actually open in iTunes; just click Open. You should not forget the name of the KSign/ESign you downloaded.

💡 KSigns are better! Start with the one at the top and work your way down the list if it is revoked.
💡 To save time, you could install multiple KSigns/ESigns at a time.

💡 Attempt to install all the KSigns/ESigns! Do not just try a few and give up because all of them were revoked.

  1. Go to your home screen and wait for the KSign/ESign app to appear. Click on it and make sure you don't get an integrity/internet connection error (if you do, delete it and download another KSign/ESign). If you get an "Untrusted Developer" error, continue reading this guide.

⚠️ If no KSign/ESign appears on your home screen after you click Allow, read KSign Troubleshooting.

  1. Go to Settings → General → VPN and Device Management. Under Enterprise Apps, click on the certificate name and trust it.

💡 If you get asked to restart your phone, do so. It will show a "Ready to Install Profile" screen where you will need to enter your password to confirm that you want to install the profile/certificate).

  1. Download the Delta IPA by going to https://deltaexploits.gg. Open this in Safari, not the Discord browser preview.

⚠️ If you cannot access the website, look here.

  1. Use one of the methods below (depending on if you are using KSign or ESign):

KSign Method​

  1. Open KSign, and in the Files section, click the plus (+) button.

⚠️ If KSign crashes upon opening, you will need to get a different one!

  1. Click Import Files and add the Delta IPA you downloaded.

⚠️ If you get an extraction error, please ensure the IPA downloaded correctly (file size should be 100MB+). If you did download it correctly, go to KSign Settings → Archive & Extraction. Switch the extraction library, then close the app and reopen it. Afterwards, try to re-import.

  1. Click the Delta IPA that appears in KSign Files, then click Import to Library.
  2. Click on Library, then wait until Delta shows in Downloaded Apps.

⚠️ KSigns have their certificate bundled, so you do not need to import it. The old KSigns were updated to be like this as well. If you read the "KSign Method without khoindvn" section, do the following:

If you haven't already, download the Certificates ZIP by going to https://osign.ipasign.cc/, clicking "Certificates" and then clicking "Download". Afterwards, go to the Files app and compress/extract the ZIP.
In KSign, click on Certificates and click Import. Import the Certificate File (the .p12 file you used on the IPASignX website) and the Provisioning File (the .mobileprovision file). Set the password to "osign" and click Save. If nothing shows, try again.

If you forgot the name of the KSign you installed, check in Settings → General → VPN and Device Management.

  1. Click Delta (in Library), then click Sign and Install. Press Start Signing and wait (do not exit out of KSign). Click Install when prompted. You might need to Sign and Install separately if it does not work.

Make sure Not Secure Connection Warning (Settings > Safari) is DISABLED!
⚠️ If Delta gets stuck on the Ready screen, do the following:

Go to the "Settings" Section of KSign.
Tap "Server & SSL".
Change "Installation Type" to "Semi-Local".
Click “Suspend” to close KSign. Afterwards, reopen it.
Try resigning + reinstalling again.

  1. Go to your device's home screen and wait until the new KSign app installs, which will turn into a Delta. You can now click it and play Roblox with Delta!

⚠️ If you click on Delta/KSign and get an integrity error, or if you click on it and it immediately closes/crashes, you will need to delete Delta and/or the KSign. Afterwards, install another KSign/ESign. MAKE SURE YOU TRY THEM ALL, DON’T GIVE UP!

⚠️ Do not delete the DNS or use a VPN. You should also not delete KSign as you will need it when Delta updates.

💡 If you open Roblox and it gives an update pop-up, join the Delta Discord server (https://discord.com/invite/deltax) and wait until the devs ping about an update for Delta. Once they ping, delete Delta (from App Library, not (just) in KSign), download the new IPA, then import it in KSign and sign and install it.

ESign "Ysign" Method​

This is the new ESign, which is like a hybrid of KSign and old ESign.
In the User Service Agreement, it is referred to as "Ysign", so I will call it this.

  1. Open Ysign.

⚠️ YSign has its certificate bundled, so you do not need to import it. If you read the "ESign "Ysign" Method without khoindvn" section, do the following:

If you haven't already, download the Certificates ZIP by going to https://osign.ipasign.cc/, clicking "Certificates" and then clicking "Download". Afterwards, go to the Files app and compress/extract the ZIP.
In Ysign, click on Settings, then click Certificate Management and and click Import. Import the Provisioning File (the .mobileprovision file). Afterwards, import the Certificate File (the .p12 file you used on the IPASignX website) and enter the certificate password ("osign"), then click Confirm.

If you forgot the name of the Ysign you installed, check in Settings → General → VPN and Device Management.

  1. Click on Don't Allow for notifications (or Allow).
  2. Click Next for the User Service Agreement, then click Agree.
  3. Click the ... button at the top right, then click Import File.
  4. Click Files, then click on the Delta IPA you downloaded.
  5. Wait until the IPA appears in Ysign, then click it.
  6. Click Extract IPA, and wait for it to finish. Click the folder it creates.
  7. Click Payload, then click Delta.
  8. Click Sign, then click Start Signing.

⚠️ If you encounter application crashes during installation, try enabling the "Automatically insert JB dependencies" feature to see if that resolves the issue.

  1. Wait for it to Sign, then click "Go to Install".
  2. Click "Install" for the "download.ipsv.eu.org" pop-up.
  3. Go to your home screen. Delta should install; you are done!

⚠️ If you click on Delta/ESign and get an integrity error, or if you click on it and it immediately closes/crashes, you will need to delete Delta and/or the ESign. Afterwards, install another KSign/ESign. MAKE SURE YOU TRY THEM ALL, DON’T GIVE UP!

⚠️ Do not delete the DNS or use a VPN. You should also not delete KSign as you will need it when Delta updates.

💡 If you open Roblox and it gives an update pop-up, join the Delta Discord server (https://discord.com/invite/deltax) and wait until the devs ping about an update for Delta. Once they ping, delete Delta (from App Library), download the new IPA, then import it in ESign and sign and install it.

ESign Method (non-"Ysign" version)​

⚠️ This version of ESign is DEPRECATED! If you know what you're doing, read this.

KSign Method without Khoindvn​

If you want to get KSign (and you do not want to use https://khoindvn.pages.dev to get them), read this:

  1. Read my IPASignX tutorial until you finish Step 16. Instead of using the Delta IPA, use KSign's: https://github.com/Nyasami/KSign/releases/latest/download/KSign.ipa. You can use the Osign DNS or Khoindvn DNS (or any other anti-revoke DNS), it does not matter much. Make sure to download the Certificates ZIP.
  2. You can now read the KSign Method section. You will need to import the .p12 and .mobileprovision files.

ESign "Ysign" Method without Khoindvn​

  1. Read my IPASignX tutorial until you finish Step 16. Instead of using the Delta IPA, use ESign's: https://khoindvn.io.vn/iPA/esign.ipa. You can use the Osign DNS or Khoindvn DNS (or any other anti-revoke DNS), it does not matter much. Make sure to download the Certificates ZIP.
  2. You can now read the ESign "Ysign" Method section.