Account Locked

[quote='852386022, VBFSDEV, /thread/795578?answerId=852386022#852386022, /profile/VBFSDEV'] they will have access to all certificates, as you cannot grant selective certificate access. [/quote] I think you’re confused by the terminology here (an industry-wide problem, alas). It’s fine to give anyone access to a certificate. It only contains a public key. To sign code you need a digital identity, aka a code-signing identity, which is a certificate and the private key that matches the public key in that certificate. So, there’s no issue with your freelancer being able to access your Developer ID certificate [1]. What you have to protect is the matching private key. I discuss this terminological confusion in more detail in TN3161 Inside Code Signing: Certificates [quote='852386022, VBFSDEV, /thread/795578?answerId=852386022#852386022, /profile/VBFSDEV'] there is no solution to perform our signing process without granting the freelancer access to our app store connect account, correct? [/quote] It’s not

Hi there, can you share how you managed to renew your enterprise developer account? We submitted the renew application two months ago but still get no reply from Apple yet. I'm getting worry since our company rely heavily on this program. Thanks!

Hi there, can you share how you managed to renew your enterprise developer account? We submitted the renew application two months ago but still get no reply from Apple yet. I'm getting worry since our company rely heavily on this program. Thanks!

Thanks for the clarification. I have one more question: After transferring an iOS app to a new Apple Developer account, if we update the backend server with the new .p8 file (for APNs authentication), but the app installed on user devices is still signed with the old distribution certificate (and therefore has the old Team ID), will push notifications continue to work with the new .p8 file? Or is it necessary to submit a new binary to the App Store, signed with the new account’s certificate and Team ID, for push notifications to function correctly?

Yes. Just like you would do for iOS. But that is exactly the problem, no? If I grant access to app store connect, they will have access to all certificates, as you cannot grant selective certificate access. And that's what you warned about in your first post, no? Or did I misunderstand you here? As a follow-up to that, I understood now that it is clear that there is no solution to perform our signing process without granting the freelancer access to our app store connect account, correct? Hence: That’s a balance between what authority you want to grant them and how much time you want to spend servicing their requests for credential manipulation. Although, having said that, I’ll note that this is no different than it is for iOS. What is the role that allows the freelancer to do as you say and nothing else? I'm asking you as an expert because I cannot risk any unwanted data exposure; as we initially thought (according to initial talks with Apple Support) that we cannot grant access to our app store con

[quote='852335022, felixs, /thread/795686?answerId=852335022#852335022, /profile/felixs'] Should I file a radar … about this? [/quote] Let’s hold off on that for a minute. [quote='852335022, felixs, /thread/795686?answerId=852335022#852335022, /profile/felixs'] Should I file a … DTS incident about this? [/quote] DTS incidents are no more. Instead we have DTS code-level support request. Most of those get bounced back to the forums [1], so you’re already in the right place. Are you testing this on a clean machine? Or testing the old code and the new code on the same machine? I suspect you’re hitting a TCC block and TCC can present weird results on development Macs. I generally recommend that you test stuff like this on a fresh machine. Usually I do this on a VM: I take a snapshot of the machine before it’s ever seen my app. I install my app. I test it. When I’m done, I restore the snapshot. And then repeat from step 2. Try this with the SMJobBless version of your app and make sure it works. Then restore from th

[quote='852314022, VBFSDEV, /thread/795578?answerId=852314022#852314022, /profile/VBFSDEV'] do you mean adding the freelancer to my app store connect account? [/quote] Yes. Just like you would do for iOS. [quote='852314022, VBFSDEV, /thread/795578?answerId=852314022#852314022, /profile/VBFSDEV'] which role would you recommend … ? [/quote] That’s a balance between what authority you want to grant them and how much time you want to spend servicing their requests for credential manipulation. Although, having said that, I’ll note that this is no different than it is for iOS. IMPORTANT There’s one thing to watch out for here. If you make them an Admin, don’t explicitly allow them to created Developer ID certificates. See the “Create cloud-managed Developer ID certificates” row in Developer > Support > Articles > Program Roles. [quote='852314022, VBFSDEV, /thread/795578?answerId=852314022#852314022, /profile/VBFSDEV'] You also say that we should not grant access to any certificates [/quote] There

Ah, nccourts.org is deliberately locking me out. When I go to www.nccourts.org, the site tells me I’m blocked. This seems to be because I’m not in the US. If I bounce through a Mac in Cupertino [1], I’m able to connect. [quote='852155022, jim-epoch, /thread/795697?answerId=852155022#852155022, /profile/jim-epoch'] I will give your idea of a test connection app a try! [/quote] Cool. When you reply here, use @DTS Engineer to tag me in. That’ll increase the chances of me seeing your reply. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com

Sorry I didn’t reply sooner. I wasn’t notified of your earlier post. I don’t think there’s any reasonable way for you to address this within your ES client. Rather, I recommend that you file a bug about it. Please post your bug number, just for the record. ps It wouldn’t surprise me if this were fixed by further locking down the TCC database but… hey… that’s not my call to make. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com