My macOS app, AnimacX, cannot complete Developer ID distribution export in Xcode Cloud. The affected build is 1144, and the preceding build 1143 contains the following certificate lookup and creation failures.
Environment:
- Team ID: SWWMY4BCX7
- Bundle ID: app.anix.AnimacX
- Xcode version recorded in the Build 1143 logs: 27.1 (27A9275)
- Automatic signing enabled
- Failing step: Export archive for developer-id distribution
- xcodebuild -exportArchive exits with code 70
The provisioning log shows this sequence:
- Xcode Cloud queries certificates with type DEVELOPER_ID_APPLICATION_MANAGED. The response contains an empty data array and a total count of 0.
- Xcode then attempts to create a managed Developer ID Application certificate.
- The creation request fails with:
HTTP 409
code: ENTITY_ERROR
resultCode: 7460
You already have a current Developer ID Application Managed
certificate or a pending certificate request.
The export subsequently reports:
No signing certificate "Developer ID Application" found
No "Developer ID Application" signing certificate matching
team ID "SWWMY4BCX7" with a private key was found.
No profiles for 'app.anix.AnimacX' were found.
However, the Certificates page for this team lists two Developer ID Application Managed (Xcode Cloud) certificates, both created by Xcode Cloud and expiring on February 2, 2027. I have an Admin role on the team.
This workflow was working normally until recently, and I have not created, revoked, or otherwise modified any certificates. Building and uploading the macOS app to App Store Connect directly from local Xcode still succeeds. The iOS and tvOS builds and distribution workflows also continue to work normally. The failure is limited to Developer ID distribution export for macOS in Xcode Cloud.
I contacted Apple Developer Support under case 103008194927 and was directed to post here. Screenshots are attached, and I can provide the full distribution logs.
Could an Apple engineer help determine why Xcode Cloud returns no certificates while the creation service reports an existing certificate or pending request? What action is required to restore Developer ID export, and does this require investigation of the team’s cloud-managed signing state?