codesign reports good but package still flagged by Gatekeeper

I'm using my 3rd Party Developer and 3rd Party Installer certs to codesign an app bundle and then the package for that app for non-MAS distribution. Both operations report success and running "codesign -vv /Applications/application.app" reports:


/Applications/application.app: valid on disk

/Applications/application.app: satisfies its Designated Requirement


However, when I transfer the PKG file to a server and then download it onto another system, Gatekeeper tells me that the app is from an unidentified developer. I have verified my certificates in Keychain Access and they match what is included with my developer account on developer.apple.com.


Anyone have pointers as to what to check next?

Hello TOLIS Tim,

You need to use a Deveoper ID certificate for non-MAS distribution. An app would use your Developer ID Application certificate and an installer would use your Developer ID Installer certificate.

Hmmm, Thanks John, but I thought that this WAS my Developer ID cert. So, back to the Developer portal to create one and I end up with the option for creating the non-MAS Developer ID disabled:
https://dl.dropboxusercontent.com/u/67254350/Screen%20Shot%202017-02-27%20at%2011.30.38%20AM.png


Any ideas about that?

That's unusual that the screenshot shows so few options for creating Mac certificates. Here are the options I see: http://imgur.com/FSublG1


Are you an agent or admin for your account? Is it a standard Apple Developer Account?

Hello again TOLIS Tim,

I haven't created a certificate for a few years. Maybe they are requiring Xcode these days.

What happens if you zip that pkg first, then repeat the process?

Hi

Did you ever figure out how to solve your problem??

codesign reports good but package still flagged by Gatekeeper
 
 
Q