Hello,
I am experiencing persistent ITMS-90034 when trying to upload the first iOS app from a newly enrolled Individual Apple Developer Program account.
The exact error is:
Validation failed (409) Missing or invalid signature. The bundle at "Payload/[App].app" is not signed using an Apple submission certificate. (ID: 90034)
I have already performed extensive signing checks and troubleshooting:
- Apple Developer Program membership is active.
- A valid Apple Distribution certificate is installed in Keychain together with its private key.
security find-identity -v -p codesigningreports both Apple Development and Apple Distribution as valid identities.- The correct Team and Bundle ID are selected.
- Automatic signing is enabled in Xcode.
- Provisioning profile caches and DerivedData were deleted, profiles were downloaded again, and a completely fresh archive was created.
- Xcode's App Store Connect export review explicitly shows:
- Certificate: Apple Distribution
- App Store provisioning profile for the correct Bundle ID
- get-task-allow = false
- beta-reports-active = true
I then exported the IPA locally using Xcode's App Store Connect distribution workflow and independently inspected the actual exported binary with codesign.
The main application reports:
Identifier=[Bundle ID] Authority=Apple Distribution: [Name] ([Team ID]) Authority=Apple Worldwide Developer Relations Certification Authority Authority=Apple Root CA TeamIdentifier=[Team ID]
I also separately checked the embedded Capacitor.framework and Cordova.framework. Both are signed with the same Apple Distribution identity and Team ID and show the same WWDR -> Apple Root CA trust chain.
I checked Keychain as suggested in similar forum discussions. The Apple Distribution certificate has its private key, the WWDR intermediate certificates are present and valid, and certificate verification reports:
"...certificate verification successful."
Despite all of the above, a fresh upload from Xcode Organizer still consistently fails with the same ITMS-90034.
This appears very similar to other recent reports involving newly enrolled Individual Developer accounts where correctly signed binaries are rejected by App Store Connect.
I also opened an Apple Developer Support case (case 20000149684934). So far I have received general signing/troubleshooting documentation, but the issue remains unresolved.
At this point, is there any additional local signing verification I should perform, or could this indicate an account/team-level App Store Connect signing validation issue that needs to be investigated on Apple's side?
I would especially appreciate guidance from Apple DTS on what diagnostic information would be useful to distinguish a local certificate-chain issue from an App Store Connect/account-side validation issue.
Thank you.