How to change the Developer ID Installer certificate associated with my account?

Question

Created Nov ’15

Replies 2

Boosts 0

Views 2.2k

Participants 2

I have an issue with my Developer ID Installer certificate. XCode signals the problem with a "reset" button in front of the certificate.

I've created new certificates, and now I have 5 of them which is the maximum and they can't be revoked.

In Keychain I can see that I've lost (I don't know how) the privacy key for the original certificate. The 4 new certificates are fine.

It doesn't help if I keep only 1 valid certificate in my keychain and remove all the others. Each time I delete and re-create my account from XCode, the problem is still there.

It looks like my account is associated with the first certificate (the one that I've lost the privacy key) and doesn't want to switch to another certificate.

Can someone help me out?

Boost

Answer 1

KMT OP

Nov ’15

You should only be working with a pair of top level certificates - one for Developer and one for Distribution, per developer account.

If you lost your original key, you should be able to generate a new one/CSR in the Member Center and install it to your keychain, deleting old. From the docs "If the private key is lost, you'll have to create an entirely new identity to sign code".Confirm your process via the docs.

If keychain is balking, try the menu for 'keychain firstaid'.

0

Answer 2

baspey OP

Nov ’15

Apple is taking care of my case. My contact told me that "my certificates have been revoked because their privacy key was compromised". She's asked the security team to allow me to create a 6th certificate, but it'll take a long time.

I'm surprised because I had read that Apple is very reluctant to revoke Developer Id certificates.

http://stackoverflow.com/questions/25005194/unable-to-revoke-mac-certificates

Normally they do it only if there's a security issue, because as soon as the certificate is revoked the consequence is that my program can't be installed anymore. In my case, the certificate was revoked without even warning me! No error message, no mail, no nothing... I'm puzzled because the certificates still appear as fine in my Member Center, but the Apple contact insists that they've been revoked.

One case or the other, a very messy situation that puts me in deep trouble 😟

0