Convert dmg application

Question

Created Jan ’22

Replies 3

Boosts 0

Views 2.2k

Participants 2

Hi, I have start a project to implement Intune with MacOS devices. In order to upload application at Intune and be operated the only way is to find *.pkg file that will be fine. Now most of the application that we would like to be distribute are *.dmg, when I try to convert as pkg file in order to be converted with intunemac util. After a lot of search at internet I found that when you convert dmg will loose the apple developer ID. Without the signing certificate from developer Company Portal (Intune) does not allow the app to be downloaded and install. How I can convert the dmg file without loosing the cert.

I have to mention that I do not want to make any changes to application or even do something outlaw.

Any help will be helpfull

:(

Boost

Answer 1

DTS Engineer OP

Apple

Jan ’22

An app installer package contains two types of signatures:

The code signature of the app itself.
The signature on the installer package.

If you extract an app from a disk image and create an installer package from it, the code signature should be preserved. Which leaves you with the question of how to set up the installer package signature. The key thing to note here is that the installer package signature doesn’t have to be from the same developer as the code signature. You can create your own Developer ID Installer signing identity, use that to sign the installer package, notarise that package, and away you go.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0

Answer 2

Ste-ND13 OP

Jan ’22

Thanks a lot for your Info. Unfortunately in order to create a Developer ID is something that I had already read it, the problem is that I am not a developer first of all and second I do not want to distribute thru App Store, the only think that I would like to do is to just converted to pkg and distribute thru MDM Server that accept only pkg files to be converted and upload to MDM. Is any other way to convert it in order to keep it as it is at dmg file?

0

Answer 3

DTS Engineer OP

Apple

Jan ’22

I do not want to distribute thru App Store

Understood. Developer ID is specifically for distributing outside of the App Store. See the Developer ID page for more.

Is any other way to convert it in order to keep it as it is at dmg file?

For distribution outside of the App Store there’s really only two options:

Sign your installer package with a Developer ID and then notarise it.
Don’t sign your installer package.

The first option is the standard option and will work everywhere. The second option may trigger issues with Gatekeeper and other systems. Whether there’s a way around that with your specific MDM setup, I don’t know. You’d have to ask your MDM vendor about that.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0