Cannot see Developer ID Installer cert in Keychain after import.

Question

Created Jul ’22

Replies 4

Boosts 0

Views 4.2k

Participants 2

I have a question regarding why I cannot see/import our new "Developer ID Installer" cert in keychain. I created an Install cert a month or two back no issues. There is 1 difference this time - I am no longer the Account Holder, so steps followed were:-

I created CSR from my keychain.
I asked new Account Holder to use my CSR to create the Developer ID Installer certificate on Developer Portal.
Account Holder downloaded and shared the .cer file with me.
I imported the .cer file to my keychain. I tried both double clicking the .cer file and also tried by using the import option on keychain. I restarted Keychain and Mac but still the new cert is not showing in either My Certificates or Certificates.

I used the above steps for other cert types and it works fine, i.e. User 1 created CSR and User 2 creates iOS Distribution cert from User 1 CSR. In this case I can import the .cer fine in User 1 keychain - no issues.

Can you advise if Dev ID Installer cert is different and why I cannot import to my Keychain. Maybe it is importing but I just cannot view it ?

Appreciate any advice.

Boost

Answer 1

DTS Engineer OP

Apple

Jul ’22

There is nothing fundamentally different about Developer ID Installer certificates that would prevent Keychain Access from importing them. I suspect that something is borked with your keychain. Try this:

Create a new user account on your Mac.
Run Keychain Access.
Choose File > Import Items and select the .cer file.
The imported certificate should show up under Certificates [1].

Does that work?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] But not My Certificates, because this user doesn’t have the matching private key.

0

Answer 2

brianbur OP

Jul ’22

Thanks for prompt response.

My Mac is company issued & company manager so I cannot just add a new user to the Mac.However, I shared the .cer with my collegue and he imported to his Keychain and cannot see the cert either. Very strange.

Please note - that I created a iOS DIstribution cert after I was having issues with the Installer cert import and the iOS Distribution cert imported fine without any issues or without reboot.

Is there any way to run a debug or check logs after the import command completes. I mean the command runs and completes, but there is no indication if the import was successful or not. Assuming the command was sucessful, any way to locate the newly imported cert ?

0

Answer 3

DTS Engineer OP

Apple

Jul ’22

My Mac is company issued & company manager so I cannot just add a new user to the Mac.

Ah. In that case I have a couple of suggestions:

If you’re able to create a VM on your Mac, create a fresh virtual Mac and try installing the certificate there.
Talk to your internal support folks.

I’ve seen other folks with problems like this and it caused by the endpoint security software installed in their managed environment.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0

Answer 4

brianbur OP

Jul ’22

Hi, Again thanks for your follow up. I do have an update. We transferred the Account Holder back to my AppleID and then I generated a new CSR and Developer ID Installer certificate which I could successfully import to my Keychain. It is a very srange but at least now all are happy that we have working certificate.

I believe I now need to email product-security@apple. com and request they delete/remove the un-used certificate that did not work.

Many Thanks -Brian

0