issues correctly signing VPN app with developer id

I'm working on a VPN app with an embedded network extension. The build works correctly when signed with a Development certificate, but when signed with a Developer ID certificate, the network extension fails to run with this error in Console.app:
Code Block
neagent Provider is an app extension and therefore cannot be signed with a Developer ID certificate


It's not clear to me what this means, nor how to correct it. I've seen some suggestions that NEMachServiceName needs to be set in the network extension's Info.plist, but that has not made a difference for me. Any help would be appreciated.

I've attached information about the code signing entitlements, provisioning profiles, and info.plists from both apps.


You need to use System Network Extension (sysex). App Network Extension will not work with Developer ID certificate.

issues correctly signing VPN app with developer id
 
 
Q