Notary Tool credentials failing to stay persistently in the keychain

The problem is the following:

  1. We create a keychain item called NotaryTool (There are multiple accounts that use Notary tool and we created it for all of them )
  2. This is created in the following way:
$ xcrun notarytool store-credentials

This process stores your credentials securely in the Keychain. You reference these credentials later using a profile name.

Profile name:
NotaryTool

We recommend using App Store Connect API keys for authentication. If you'd like to authenticate with an Apple ID and app-specific password instead, leave this unspecified.

Path to App Store Connect API private key:
//AuthKey_ABCDEFGH.p8
App Store Connect API Key ID:
<ABCDEFGH>
App Store Connect API Issuer ID:
ABCDEF-ABCD-1234-1234-1234567
Validating your credentials...
Success. Credentials validated.
Credentials saved to Keychain.
To use them, specify `--keychain-profile "NotaryTool"`
  1. The key is downloaded from Apple and some other IDs are provided alongside.
  2. These should remain in the keychain for as long as the user process is running (just like any other process)
  3. A few runs are successful when we run with the profile that was created.
  4. After a few runs we start seeing a failure.
  5. Now we are seeing the following issue where the keychain item just vanishes:
Error: No Keychain password item found for profile: NotaryTool\n\nRun 'notarytool store-credentials' to create another credential profile.\nError during the not process\nTue Aug 26 06:02:09 2025  Notarization failed with notarytool with exit code 17664: \nTue Aug 26 06:02:09 2025 could not upload for notarization!!!
2. These should remain in the keychain for as long as the user process is running (just like any other process)

I’m confused by this comment. They keychain is a per-user persistent database. Stuff you put into the keychain should stick around indefinitely, as long as you’re logged into that user account.

Are you able to reproduce this when running these commands from Terminal? Or are you testing this only in some other environment, like a CI system or over SSH?

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Notary Tool credentials failing to stay persistently in the keychain
 
 
Q