Unable to build chain to self-signed root

Hello world,

My company has a third-party app that we are responsible for re-signing on a yearly basis. This app has not and will not be updated by the developer, and will not run on any iOS version higher than 10.x.

My background is PC, but I do have documented steps that, historically, have allowed me to get the app updated yearly and deployed to 100 or so devices.

My best guess is that I am no longer doing something correctly with my signing certificate, as when I attempt to run the command "/usr/bin/codesign -f -s "iPhone Distribution: {Company}" --entitlements entitlements.plist Payload/*.app"

I am not getting prompted for the certificate's password like I have in years prior. I am also getting the error: "Warning: unable to build chain to self-signed root for signer "iPhone Distribution: {Company}": errSecInternalComponent.

Not totally surprisingly, when I deploy the app via IBM's MDM solution, the app gets about 75% completed on the iPod before crapping out with the error: Unable to Download App. 'SAM-iStore' could not be installed at this time. Done| Retry.

If anyone has any suggestions I can try, and can explain them in simple PC terms, it would be greatly appreciated.

Thanks in advance.

I have a couple of posts that dig into this issue:

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Unable to build chain to self-signed root
 
 
Q