Unable to sign .app file with Developer ID installer certificate

I am using matlab to create an application (.app) using matlab application compiler. Along with that, I use matlab to create an installer for that.

Unfortunately, the installer is in (.app) format. So do some custom things to install the dependencies and copying my application to Applications folder.

I am able to sign the original application with Developer ID application certificate. But I am not able to sign the installer in .app format with Developer ID installer certificate.

Is there any flag in any signing executable that allows me to use Developer ID installer certificate to sign .app file instead of typical (.pkg/.dmg)?

Any help would be much appreciated.

Answered by DTS Engineer in 824477022

We have general advice on how to sign and package Mac apps in:

If you’re working with third-party tools, I encourage you to research and apply the advice from the tool vendor themselves. I don’t maintain expertise in third-party tools.

Written by vp35 in 774077021
But I am not able to sign the installer in .app format with Developer ID installer certificate.

Right. A Developer ID Installer signing identity is only useful for signing Apple installer packages (.pkg). If your third-party tools create a runnable installer (.app) then, from the perspective of code signing, that’s code and you’d sign it with Developer ID Application.

IMPORTANT The next step here is notarisation, and there’s a specific gotcha there with third-party installers: If your third-party installer uses an archive format that the notary service doesn’t understand, you need two rounds of notarisation. See the Important box in Customizing the notarization workflow.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

We have general advice on how to sign and package Mac apps in:

If you’re working with third-party tools, I encourage you to research and apply the advice from the tool vendor themselves. I don’t maintain expertise in third-party tools.

Written by vp35 in 774077021
But I am not able to sign the installer in .app format with Developer ID installer certificate.

Right. A Developer ID Installer signing identity is only useful for signing Apple installer packages (.pkg). If your third-party tools create a runnable installer (.app) then, from the perspective of code signing, that’s code and you’d sign it with Developer ID Application.

IMPORTANT The next step here is notarisation, and there’s a specific gotcha there with third-party installers: If your third-party installer uses an archive format that the notary service doesn’t understand, you need two rounds of notarisation. See the Important box in Customizing the notarization workflow.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Unable to sign .app file with Developer ID installer certificate
 
 
Q