Endpoint Security Extension + SandBox + App Distribution

Hi All,

I'm developing a security application that uses an endpoint security extension. The application has two parts main and extension. I have an entitlements for Security Extension Client from Apple.

I'd like to distribute apps through the Apple Store. Locally the app runs without problems on enabled machines, but when I try to get it through Testfligt to the appstore I get two errors:

ITMS-90285 - Invalid Code Signing Etitlements. Your application bundle’s signature contains code signing etitlements that are not supported on MacOs. Specifically, key ‚com.apple.developer.endpoint-security.client‘

ITMS-90296 - App sandbox not enabled on extension

When I turn on sandbox for extension, the extension fails to register endpoint security client

let res = es_new_client(&client) { _, event in self.eventDispatcher(msg: event)

Without sandbox it runs without any problem.

Thank you very much for your help I don't know how to proceed.

Martin

Accepted Reply

I'd like to distribute apps through the Apple Store.

While the Mac App Store will accept certain types of sysexes — specifically Network Extension and DriverKit — it will not accept Endpoint Security ones. If you’re creating an ES sysex, you must distribute it independently, using Developer ID signing.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Replies

I'd like to distribute apps through the Apple Store.

While the Mac App Store will accept certain types of sysexes — specifically Network Extension and DriverKit — it will not accept Endpoint Security ones. If you’re creating an ES sysex, you must distribute it independently, using Developer ID signing.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Hi Eskimo,

many thanks for you answer.

Unfortunately we will have to change our plans for the distribution of the application.

Martin