<!--
{
  "documentType" : "article",
  "framework" : "Security",
  "identifier" : "/documentation/Security/code-signing-services-result-codes",
  "metadataVersion" : "0.1.0",
  "role" : "collectionGroup",
  "title" : "Code Signing Services Result Codes"
}
-->

# Code Signing Services Result Codes

Recognize result codes specific to the code signing services API.

## Discussion

Use the [`SecCopyErrorMessageString(_:_:)`](/documentation/Security/SecCopyErrorMessageString(_:_:)) function to obtain a human readable string corresponding to these status codes.

The functions of the [Code Signing Services](/documentation/Security/code-signing-services) API may also return the general codes listed in [Security Framework Result Codes](/documentation/Security/security-framework-result-codes). In particular, you might expect to encounter [`errSecSuccess`](/documentation/Security/errSecSuccess), [`errSecUnimplemented`](/documentation/Security/errSecUnimplemented), [`errSecParam`](/documentation/Security/errSecParam), and [`errSecAllocate`](/documentation/Security/errSecAllocate).

## Topics

### Code-signing format result codes

[`var errSecCSAmbiguousBundleFormat: OSStatus`](/documentation/Security/errSecCSAmbiguousBundleFormat)

The bundle could be an app or a framework.

[`var errSecCSBadBundleFormat: OSStatus`](/documentation/Security/errSecCSBadBundleFormat)

The bundle format is unrecognized, invalid, or unsuitable.

[`var errSecCSBadDictionaryFormat: OSStatus`](/documentation/Security/errSecCSBadDictionaryFormat)

A required information property list (Info.plist) file or resource is malformed.

[`var errSecCSBadDiskImageFormat: OSStatus`](/documentation/Security/errSecCSBadDiskImageFormat)

The disk image format unrecognized, invalid, or unsuitable.

[`var errSecCSBadObjectFormat: OSStatus`](/documentation/Security/errSecCSBadObjectFormat)

The object file format invalid or unsuitable.

### Code-signing database issue result codes

[`var errSecCSDBAccess: OSStatus`](/documentation/Security/errSecCSDBAccess)

Cannot access signature database.

[`var errSecCSDBDenied: OSStatus`](/documentation/Security/errSecCSDBDenied)

Access to signature database denied.

[`var errSecCSDbCorrupt: OSStatus`](/documentation/Security/errSecCSDbCorrupt)

A system database or file is corrupt.

[`var errSecCSSigDBAccess: OSStatus`](/documentation/Security/errSecCSSigDBAccess)

Can’t access signature database.

[`var errSecCSSigDBDenied: OSStatus`](/documentation/Security/errSecCSSigDBDenied)

Access to signature database denied.

### Code-signing host protocol issue result codes

[`var errSecCSHostProtocolContradiction: OSStatus`](/documentation/Security/errSecCSHostProtocolContradiction)

Host protocol violation: contradictory hosting modes.

[`var errSecCSHostProtocolDedicationError: OSStatus`](/documentation/Security/errSecCSHostProtocolDedicationError)

Host protocol violation: operation not allowed with or for a dedicated guest.

[`var errSecCSHostProtocolInvalidAttribute: OSStatus`](/documentation/Security/errSecCSHostProtocolInvalidAttribute)

Code signing host returned invalid or inconsistent attributes for guest code.

[`var errSecCSHostProtocolInvalidHash: OSStatus`](/documentation/Security/errSecCSHostProtocolInvalidHash)

Host protocol violation: invalid hash of guest code.

[`var errSecCSHostProtocolNotProxy: OSStatus`](/documentation/Security/errSecCSHostProtocolNotProxy)

Host protocol violation: proxy hosting not engaged.

[`var errSecCSHostProtocolRelativePath: OSStatus`](/documentation/Security/errSecCSHostProtocolRelativePath)

Host protocol violation: absolute guest path required.

[`var errSecCSHostProtocolStateError: OSStatus`](/documentation/Security/errSecCSHostProtocolStateError)

Host protocol violation: invalid guest state change request.

[`var errSecCSHostProtocolUnrelated: OSStatus`](/documentation/Security/errSecCSHostProtocolUnrelated)

Host protocol violation: the specified code is not a guest of the specified code signing host.

### Code-signing signature issue result codes

[`var errSecCSSignatureFailed: OSStatus`](/documentation/Security/errSecCSSignatureFailed)

Code or signature modified.

[`var errSecCSSignatureInvalid: OSStatus`](/documentation/Security/errSecCSSignatureInvalid)

Invalid format for signature.

[`var errSecCSSignatureNotVerifiable: OSStatus`](/documentation/Security/errSecCSSignatureNotVerifiable)

Signature cannot be read.

[`var errSecCSSignatureUnsupported: OSStatus`](/documentation/Security/errSecCSSignatureUnsupported)

Unsupported type or version of signature.

[`var errSecCSUnsigned: OSStatus`](/documentation/Security/errSecCSUnsigned)

Code object is not signed.

[`var errSecCSUnsignedNestedCode: OSStatus`](/documentation/Security/errSecCSUnsignedNestedCode)

Nested code is unsigned.

[`var errSecCSUnsupportedDigestAlgorithm: OSStatus`](/documentation/Security/errSecCSUnsupportedDigestAlgorithm)

The signature digest algorithm(s) specified are not supported.

[`var errSecCSSignatureUntrusted: OSStatus`](/documentation/Security/errSecCSSignatureUntrusted)

The signature is valid but signer isn’t trusted.

### Code-signing file format issue result codes

[`var errSecCSDSStoreSymlink: OSStatus`](/documentation/Security/errSecCSDSStoreSymlink)

A `.DS_Store` file can’t be a symlink.

[`var errSecCSFileHardQuarantined: OSStatus`](/documentation/Security/errSecCSFileHardQuarantined)

File open or execution not allowed.

[`var errSecCSInvalidSymlink: OSStatus`](/documentation/Security/errSecCSInvalidSymlink)

Invalid destination for symbolic link in bundle.

[`var errSecCSNoMainExecutable: OSStatus`](/documentation/Security/errSecCSNoMainExecutable)

The code has no main executable file.

[`var errSecCSRegularFile: OSStatus`](/documentation/Security/errSecCSRegularFile)

The main executable or Info.plist must be a regular file (and not, for example, a symbolic link).

[`var errSecCSUnsealedAppRoot: OSStatus`](/documentation/Security/errSecCSUnsealedAppRoot)

Unsealed contents present in the bundle root.

[`var errSecCSUnsealedFrameworkRoot: OSStatus`](/documentation/Security/errSecCSUnsealedFrameworkRoot)

Unsealed contents present in the root directory of an embedded framework.

### Code-signing resource issue result codes

[`var errSecCSResourceDirectoryFailed: OSStatus`](/documentation/Security/errSecCSResourceDirectoryFailed)

A directory or its signature has been modified and is therefore invalid.

[`var errSecCSResourceNotSupported: OSStatus`](/documentation/Security/errSecCSResourceNotSupported)

Found an unsupported resource.

[`var errSecCSResourceRulesInvalid: OSStatus`](/documentation/Security/errSecCSResourceRulesInvalid)

Invalid resource selection rule or rules.

[`var errSecCSResourcesInvalid: OSStatus`](/documentation/Security/errSecCSResourcesInvalid)

The sealed resource directory is invalid.

[`var errSecCSResourcesNotFound: OSStatus`](/documentation/Security/errSecCSResourcesNotFound)

Cannot find sealed resources in code.

[`var errSecCSResourcesNotSealed: OSStatus`](/documentation/Security/errSecCSResourcesNotSealed)

Resources are not sealed by the signature.

### Other result codes

[`var errSecCSBadCallbackValue: OSStatus`](/documentation/Security/errSecCSBadCallbackValue)

The monitor callback returned invalid value.

[`var errSecCSBadFrameworkVersion: OSStatus`](/documentation/Security/errSecCSBadFrameworkVersion)

The embedded framework contains a modified or invalid version.

[`var errSecCSBadLVArch: OSStatus`](/documentation/Security/errSecCSBadLVArch)

The library validation flag cannot be used with an i386 binary.

[`var errSecCSBadMainExecutable: OSStatus`](/documentation/Security/errSecCSBadMainExecutable)

The main executable failed strict validation.

[`var errSecCSBadNestedCode: OSStatus`](/documentation/Security/errSecCSBadNestedCode)

The nested code is modified or invalid.

[`var errSecCSBadResource: OSStatus`](/documentation/Security/errSecCSBadResource)

A sealed resource is missing or invalid.

[`var errSecCSCMSTooLarge: OSStatus`](/documentation/Security/errSecCSCMSTooLarge)

The signature is too large to embed.

[`var errSecCSCancelled: OSStatus`](/documentation/Security/errSecCSCancelled)

The operation was terminated by explicit cancellation.

[`var errSecCSGuestInvalid: OSStatus`](/documentation/Security/errSecCSGuestInvalid)

The identity of guest code has been invalidated.

[`var errSecCSHelperFailed: OSStatus`](/documentation/Security/errSecCSHelperFailed)

The codesign_allocate helper tool can’t be found or used.

[`var errSecCSHostReject: OSStatus`](/documentation/Security/errSecCSHostReject)

Code rejected its host.

[`var errSecCSInfoPlistFailed: OSStatus`](/documentation/Security/errSecCSInfoPlistFailed)

The Info.plist file or the signature has been modified.

[`var errSecCSInternalError: OSStatus`](/documentation/Security/errSecCSInternalError)

Internal error in Code Signing Services subsystem.

[`var errSecCSInvalidAttributeValues: OSStatus`](/documentation/Security/errSecCSInvalidAttributeValues)

An attribute value associated with a key is out of range or is the wrong type.

[`var errSecCSInvalidFlags: OSStatus`](/documentation/Security/errSecCSInvalidFlags)

Invalid or inappropriate API flags specified.

[`var errSecCSInvalidObjectRef: OSStatus`](/documentation/Security/errSecCSInvalidObjectRef)

Invalid API object reference.

[`var errSecCSInvalidPlatform: OSStatus`](/documentation/Security/errSecCSInvalidPlatform)

Invalid platform identifier or platform mismatch.

[`var errSecCSMultipleGuests: OSStatus`](/documentation/Security/errSecCSMultipleGuests)

Code signing host has more than one block of guest code with this attribute value.

[`var errSecCSNoMatches: OSStatus`](/documentation/Security/errSecCSNoMatches)

No matches were found for a search or update operation.

[`var errSecCSNoSuchCode: OSStatus`](/documentation/Security/errSecCSNoSuchCode)

Code signing host has no guest code with the requested attributes.

[`var errSecCSNotAHost: OSStatus`](/documentation/Security/errSecCSNotAHost)

This code is not a code signing host.

[`var errSecCSNotAppLike: OSStatus`](/documentation/Security/errSecCSNotAppLike)

The code is valid but does not seem to be an app.

[`var errSecCSNotSupported: OSStatus`](/documentation/Security/errSecCSNotSupported)

Operation not supported for this type of code.

[`var errSecCSObjectRequired: OSStatus`](/documentation/Security/errSecCSObjectRequired)

A required pointer argument was null.

[`var errSecCSOutdated: OSStatus`](/documentation/Security/errSecCSOutdated)

The presented data is out of date.

[`var errSecCSReqFailed: OSStatus`](/documentation/Security/errSecCSReqFailed)

The code failed to satisfy one of the code requirements.

[`var errSecCSReqInvalid: OSStatus`](/documentation/Security/errSecCSReqInvalid)

Invalid or corrupted code requirements.

[`var errSecCSReqUnsupported: OSStatus`](/documentation/Security/errSecCSReqUnsupported)

Unsupported type or version of code requirements.

[`var errSecCSStaticCodeChanged: OSStatus`](/documentation/Security/errSecCSStaticCodeChanged)

The code on disk has been modified after the code started running.

[`var errSecCSStaticCodeNotFound: OSStatus`](/documentation/Security/errSecCSStaticCodeNotFound)

Cannot find code object on disk.

[`var errSecCSTooBig: OSStatus`](/documentation/Security/errSecCSTooBig)

The code is too big for current signing format.

[`var errSecCSUnimplemented: OSStatus`](/documentation/Security/errSecCSUnimplemented)

Unimplemented code signing feature.

[`var errSecCSUnsupportedGuestAttributes: OSStatus`](/documentation/Security/errSecCSUnsupportedGuestAttributes)

Cannot locate guest code using this attribute set.

[`var errSecCSVetoed: OSStatus`](/documentation/Security/errSecCSVetoed)

[`var errSecCSWeakResourceEnvelope: OSStatus`](/documentation/Security/errSecCSWeakResourceEnvelope)

The resource envelope is obsolete (version 1 signature).

[`var errSecCSWeakResourceRules: OSStatus`](/documentation/Security/errSecCSWeakResourceRules)

The resource envelope is obsolete (custom omit rules).

[`var errSecCSBadTeamIdentifier: OSStatus`](/documentation/Security/errSecCSBadTeamIdentifier)

A Team Identifier is wrong or inappropriate.

[`var errSecCSInvalidAssociatedFileData: OSStatus`](/documentation/Security/errSecCSInvalidAssociatedFileData)

Resource fork, Finder information, or similar detritus not allowed.

[`var errSecCSInvalidTeamIdentifier: OSStatus`](/documentation/Security/errSecCSInvalidTeamIdentifier)

A Team Identifier string is invalid.

[`var errSecMultipleExecSegments: OSStatus`](/documentation/Security/errSecMultipleExecSegments)

The image contains multiple executable segments.

[`var errSecCSInvalidEntitlements: OSStatus`](/documentation/Security/errSecCSInvalidEntitlements)

Encountered an invalid entitlement plist.

[`var errSecCSInvalidRuntimeVersion: OSStatus`](/documentation/Security/errSecCSInvalidRuntimeVersion)

An invalid runtime version was explicity set.

[`var errSecCSRevokedNotarization: OSStatus`](/documentation/Security/errSecCSRevokedNotarization)

Notarization indicates this code has been revoked.


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)