Certificates, Identifiers & Profiles

RSS for tag

Discuss the technical details of security certificates, identifiers, and profiles used by the OS to ensure validity of apps and services on device.

Certificates, Identifiers & Profiles Documentation

Post

Replies

Boosts

Views

Activity

Testflight doesnt open an App (error 10673)
I've successfully uploaded my macos app to tesflight (it's a game based on Unreal Engine5). It has passed all checks and is now in testflight, but when i launch it it says "The application can't be opened. -10673" And pops up another windown : "The beta app, , is no longer available. The provisioning profile is invalid" The provisioning profile doesn't specify OS versions - it's signed with distribution and installation certificates for AppStore. What would cause this? How can I fix this? MacOS version 14.5
0
0
78
1d
Trusted certificate is not trusted
I am building a command line app to interface to a Bosch Smart Home Controller (SHC) using URLSession and running into a problem with certificate authentication. Sending a request to the SHC results in a -1202 error "The certificate for this server is invalid..." which was expected as it's counted as a self-signed cert. In URLSessionDelegate SecTrustEvaluateWithError returned the CFError.localisedDescription Smart Home Controller Productive Root CA” certificate is not trusted So I used SecItemAdd to add this certificate to my login keychain and then set it to "Always Trust", but the error still persists. routines:OPENSSL_internal:SSLV3_ALERT_BAD_CERTIFICATE:/AppleInternal/Library/BuildRoots/a8fc4767-fd9e-11ee-8f2e-b26cde007628/Library/Caches/com.apple.xbs/Sources/boringssl/ssl/tls_record.cc:592:SSL alert number 42 I've tried various workarounds and also added an intermediate certificate received from the SHC to my login keychain with "Always Trust" set but the error persists - am I missing something?
0
0
101
2d
Private key is not installed in your keychain error
App.xcodeproj: error: Revoke certificate: Your account already has an Apple Development signing certificate for this machine, but its private key is not installed in your keychain. App.xcodeproj: error: No signing certificate "iOS Development" found: No "iOS Development" signing certificate matching team ID "T....." with a private key was found. From the above error during build, I do not know what I am supposed to do to fix this issue. The build was working few days back and today it is giving this error.
1
0
117
4d
Signing third party app with Enterprise using iResign
I received an app from 3rd party and need to sign it with my cert, but after following the work flow I get errors in iResign. Create a Distribution Certificate Create an Apple Developer Application Identifier Create and Install a Push SSL Certificate Create App Distribution Certificate (1 for all Ramco Apps) Create an Apple Developer Provisioning Profile Sign the App with iResign Upload to Workspace One environment I get this error when I run iResign; /var/folders/qd/z7m3dzs52rddmlvcpm_ghyl00000gn/T/com.appulize.iresign/Payload/RamcoEFBiOS.app: replacing existing signature Warning: unable to build chain to self-signed root for signer "iPhone Distribution: PHI, INC." /var/folders/qd/z7m3dzs52rddmlvcpm_ghyl00000gn/T/com.appulize.iresign/Payload/RamcoEFBiOS.app: errSecInternalComponent /var/folders/qd/z7m3dzs52rddmlvcpm_ghyl00000gn/T/com.appulize.iresign/Payload/RamcoEFBiOS.app: invalid Info.plist (plist or signature have been modified) In architecture: arm64 I've tried to find answers on these forms but could not find anything to help me. If anyone has some insight on this please let me know.
1
0
258
1w
Unable to resolve CodeSign failure
Been using Xcode for a while with C++ set to sign locally (and objC before that). All worked ok. Looking to learn swift. Created a new, blank MacOS project, which starts compiling the template project (no code added yet by me) and fails with error "Command CodeSign failed with a nonzero exit code". It's set to automatically manage signing. I have valid development certificates. I've read lots of forum articles etc but unable to resolve. Error description "resource fork, Finder information, or similar detritus not allowed" but it's exclusively apple code at this stage so would not expect any non-compliant files to be involved. Any suggestions as currently I've fallen at the first hurdle on my Swift journey? Full codesign command line below: Signing Identity: "Apple Development: Steve Proctor (XXXXXXX)" /usr/bin/codesign --force --sign xxxxxx -o runtime --entitlements /Users/steve/Documents/dev/t1/Build/Intermediates.noindex/Previews/macos/t1/Intermediates.noindex/t1.build/Debug/t1.build/t1.app.xcent --timestamp\=none --generate-entitlement-der /Users/steve/Documents/dev/t1/Build/Intermediates.noindex/Previews/macos/t1/Products/Debug/t1.app /***/t1.app resource fork, Finder information, or similar detritus not allowed Command CodeSign failed with a nonzero exit code
4
0
210
1w
Xcode and Transporter inconsistent with provisioning profile
Xcode > Target > Signing & Capabilities Automaticaly manage signing Mac OS Signing Certificate: Development --> Provisioning Profile None Required General Identity App Category Productivity Transporter Asset validation failed (90242) --> "Cannot be used with TestFlight because the bundle at “LargeNumberCalculator.app” is missing a provisioning profile. Main bundles are expected to have provisioning profiles in order to be eligible for TestFlight." (90889). What is wrong: "Provisioning Profile None Required" vs "missing a provisioning profile" ?
2
0
316
2w
Attempted to install a Beta profile without the proper entitlement.
I'm trying to install from Xcode (15.4) to my physical device (iPhone SE 3rd gen, iOS 17.5.1) but I get the following error. My provisioning profile is from a 3rd party organization, but I have confirmed my device UUID is added to their account and that the profile does contain the beta-reports-active flag. I have also checked that this is added to the entitlements file. It works fine it I deploy and install via TestFlight, but for obvious reasons I would prefer not to have to do that for each and every build. Can anyone suggest how to resolve this, either with local config or by asking the account admin to modify the provisioning profiles? Unable to Install “[redacted]” Domain: IXUserPresentableErrorDomain Code: 14 Recovery Suggestion: Failed to install embedded profile for [redacted] : 0xe800801f (Attempted to install a Beta profile without the proper entitlement.) User Info: { DVTErrorCreationDateKey = "2024-07-03 12:47:34 +0000"; IDERunOperationFailingWorker = IDEInstallCoreDeviceWorker; } -- Unable to Install “[redacted]” Domain: IXUserPresentableErrorDomain Code: 14 Recovery Suggestion: Failed to install embedded profile for [redacted] : 0xe800801f (Attempted to install a Beta profile without the proper entitlement.) User Info: { IDERunOperationFailingWorker = IDEInstallCoreDeviceWorker; } -- Failed to install the app on the device. Domain: com.apple.dt.CoreDeviceError Code: 3002 User Info: { NSURL = "file:///Users/dan/Library/Developer/Xcode/DerivedData/iosApp-gxsprezneuyftnhbmfyfssbeojgd/Build/Products/Debug%20development-iphoneos/[redacted].app/"; } -- Unable to Install “[redacted]” Domain: IXUserPresentableErrorDomain Code: 14 Failure Reason: This app cannot be installed because its integrity could not be verified. Recovery Suggestion: Failed to install embedded profile for [redacted] : 0xe800801f (Attempted to install a Beta profile without the proper entitlement.) -- Failed to install embedded profile for [redacted] : 0xe800801f (Attempted to install a Beta profile without the proper entitlement.) Domain: MIInstallerErrorDomain Code: 13 User Info: { FunctionName = "-[MIInstallableBundle _installEmbeddedProfilesWithError:]"; LegacyErrorString = ApplicationVerificationFailed; LibMISErrorNumber = "-402620385"; SourceFileLine = 308; } -- Event Metadata: com.apple.dt.IDERunOperationWorkerFinished : { "device_isCoreDevice" = 1; "device_model" = "iPhone14,6"; "device_osBuild" = "17.5.1 (21F90)"; "device_platform" = "com.apple.platform.iphoneos"; "dvt_coredevice_version" = "355.28"; "dvt_mobiledevice_version" = "1643.100.60"; "launchSession_schemeCommand" = Run; "launchSession_state" = 1; "launchSession_targetArch" = arm64; "operation_duration_ms" = 3497; "operation_errorCode" = 14; "operation_errorDomain" = IXUserPresentableErrorDomain; "operation_errorWorker" = IDEInstallCoreDeviceWorker; "operation_name" = IDERunOperationWorkerGroup; "param_debugger_attachToExtensions" = 0; "param_debugger_attachToXPC" = 1; "param_debugger_type" = 3; "param_destination_isProxy" = 0; "param_destination_platform" = "com.apple.platform.iphoneos"; "param_diag_MainThreadChecker_stopOnIssue" = 0; "param_diag_MallocStackLogging_enableDuringAttach" = 0; "param_diag_MallocStackLogging_enableForXPC" = 1; "param_diag_allowLocationSimulation" = 1; "param_diag_checker_tpc_enable" = 1; "param_diag_gpu_frameCapture_enable" = 0; "param_diag_gpu_shaderValidation_enable" = 0; "param_diag_gpu_validation_enable" = 0; "param_diag_memoryGraphOnResourceException" = 0; "param_diag_queueDebugging_enable" = 1; "param_diag_runtimeProfile_generate" = 0; "param_diag_sanitizer_asan_enable" = 0; "param_diag_sanitizer_tsan_enable" = 0; "param_diag_sanitizer_tsan_stopOnIssue" = 0; "param_diag_sanitizer_ubsan_stopOnIssue" = 0; "param_diag_showNonLocalizedStrings" = 0; "param_diag_viewDebugging_enabled" = 1; "param_diag_viewDebugging_insertDylibOnLaunch" = 1; "param_install_style" = 0; "param_launcher_UID" = 2; "param_launcher_allowDeviceSensorReplayData" = 0; "param_launcher_kind" = 0; "param_launcher_style" = 99; "param_launcher_substyle" = 8192; "param_runnable_appExtensionHostRunMode" = 0; "param_runnable_productType" = "com.apple.product-type.application"; "param_structuredConsoleMode" = 1; "param_testing_launchedForTesting" = 0; "param_testing_suppressSimulatorApp" = 0; "param_testing_usingCLI" = 0; "sdk_canonicalName" = "iphoneos17.5"; "sdk_osVersion" = "17.5"; "sdk_variant" = iphoneos; } -- System Information macOS Version 14.3 (Build 23D56) Xcode 15.4 (22622) (Build 15F31d) Timestamp: 2024-07-03T13:47:34+01:00
1
0
365
2w
Why can't use
0 * H ÷   0 1 0 ` H e 0 8 * H ÷   ) % Apple Confidential Profile. Do not distribute. Not to be used or disclosed without permission from Apple. Copyright © 2023, Apple Inc. All rights reserved. PayloadContent PayloadContent DefaultsData SeedGroup PublicBeta DefaultsDomainName .GlobalPreferences DefaultsData SeedProgram PublicSeed DefaultsDomainName com.apple.seeding DefaultsData SBIconVisibility DefaultsDomainName com.apple.appleseed.FeedbackAssistant DefaultsData MobileAssetAssetAudience 48407998-4446-46b0-9f57-f76b935dc223 MobileAssetSUAllowOSVersionChange MobileAssetSUAllowSameVersionFullReplacement MobileAssetServerURL-com.apple.MobileAsset.MobileSoftwareUpdate.UpdateBrain https://mesu.apple.com/assets/iOS17PublicSeed MobileAssetServerURL-com.apple.MobileAsset.SoftwareUpdate https://mesu.apple.com/assets/iOS17PublicSeed MobileAssetServerURL-com.apple.MobileAsset.SoftwareUpdateDocumentation https://mesu.apple.com/assets/iOS17PublicSeed DefaultsDomainName com.apple.MobileAsset PayloadIdentifier com.apple.applebetasoftware PayloadType com.apple.defaults.managed PayloadUUID 617630D8-C055-40A1-A4E8-AC30FD8A5ACE PayloadVersion 1 PayloadDescription Configures your iOS/iPadOS device for use with the Apple Beta Software Program. PayloadDisplayName iOS 17 & iPadOS 17 Beta Software Profile Beta Software Profile PayloadIdentifier com.apple.applebetasoftware PayloadOrganization Apple Inc. PayloadRebootSuggested PayloadType Configuration PayloadUUID 0C90EE68-9104-4D65-80A5-538784AAE2BE PayloadVersion 1 RemovalDate 2025-01-31T00:00:00Z TargetDeviceType 1   s0 0   ¹ûe J i0 H ÷ 0b1 0 U US1 0 U Apple Inc.1&0$ U Apple Certification Authority1 0 U Apple Root CA0 130524174337Z 280524174337Z0 1@0> U 7Apple Application Integration 2 Certification Authority1&0$ U Apple Certification Authority1 0 U Apple Inc.1 0 U US0 "0 H ÷ 0 ¸H¡glV åpÅFô¯…ã½:Þ¡çÙ¨6< b¥|  G³k ¬þØtæ 5°XOtØ£þí-î¤s%YÔ Ü&Ï ' T Ü ±à3 b ȹ¯6 ¤j § mÝÝ -Ì } Ì) £É ª¢ìÙ gi < ¿D($±Ä,5Ö± %ïP§ Û%ÆÃOo[ ¾ñ §Ôl^²9. ©ám ;®9q? ó¹ôW #O ^ ð X¾µÑìײ~Âeâñì<¦ünÛV³î ² KÉ¢ðñ1ö®Þ5là ^Pc ¶ºm\Àã & J Þ ©°Zoû k ìÝß2Þü.B¢ÊxZ× £ ¦0 £0 U ÷¾|! Û= {Ø:2 iß l 0 U ÿ 0 ÿ0 U # 0 +ÐiG v þôk .@¦÷GM ^0. U '0%0# !  http://crl.apple.com/root.crl0 U ÿ 0 * H ÷cd 0 * H ÷ Í ý¤]õñÀ I ݳ3 ­ Ð! ãÙÖÚ¯ " <YBñ- ¶?ÿôôî jxÁ.û;L ®eCËϨ ë=7 E/ J ¨ k â Ûïg¸ ñäØ qwÓó ௤ê( ¤?4ye6 T Aq× !ÜPUEÎ ¼÷ÜUгÊ(Q¬sQ ¬y n  7 a1/¡Ñºëá\7ÀØÑ çà RB¤ ö"| À?Á …ÕÂ'c°bV í%ôÌ ÜT ·yè …8@¹ íMbÔ+ö) ñg¡á r w ö  +Q Sòó óè¿¡ &Ïü 7»@0 S0 ;  À6 k 0 * H ÷ 0 1@0> U 7Apple Application Integration 2 Certification Authority1&0$ U Apple Certification Authority1 0 U Apple Inc.1 0 U US0 201214200231Z 231214200231Z0s1.0, U %AppleCare Profile Signing Certificate1 0 U Configuration Profiles1 0 U Apple Inc.1 0 U US0 "0 * H ÷ 0 Ú ûñ E0H( ì ¶A¤[ûB JVßúLWæýøÖf ö×ïÃWWÀ[kh ³oíR téAj ³ » Q¬w é ÷;$Þ #Àå °»¤ýg Bªb}ÏñAó,³! ÄûÑhsÏû ê ÒdËt©P +ñ üûSï fÄ eï2ÝV^"þïÑ8 {H ôF ¯ÉU w. ×N_ Ü H $&uwY``éL5 õ îÚzø OÝ ¿Ó r¡ëD;HÒ y åÈH'>øÊ ØòÖQnÜ ° +ùl· TÚ ç2 S¥ÿQ ¾*i'¥\ ?W°ßº"zoS5Sû¢ÔÑ"XÜ/ £ Ï0 Ë0 U ÿ 00 U # 0 ÷¾|! Û= {Ø:2 iß l 0@ + 40200 + 0 $http://ocsp.apple.com/ocsp04-aaica020 U 0 0 þ H ÷cd 0 ð0( + http://www.apple.com/appleca0 à + 0 ¶ ³Reliance on this certificate by any party assumes acceptance of the then applicable standard terms and conditions of use, certificate policy and certification practice statements.0 U % ÿ 0 H ÷cd 0 U 9S öÇGÔÆ?£l% ê$% º·0 U ÿ 0 * H ÷ Sß3çhÂ- 3=%à¬q dÙ ER ÷ ßù¾) ?nC ØÎò, ]¶OLE. |g#æ Qg% Ǽ ªë K · Êç S¥Oï p4 Ú¾ ²Õ ë( ÷¸Ìæs¾ ¦æ@ Äç0AFï t,Th ÏEi § |ààÞ Ú:K q÷Ûø·É õ y¬[$GÉ ø ­¤HÞÖ Ü w +÷p ¥A¥ ]z ] ï òé/ ûö tîPøSo¿­Ä|à IlÓV¾é * ä<ÈçÌÈ ïø¯f°3 Æ5 s¸ x¦cPb b ÉU ´V×&ñ¦ èv¹ |:¯"Ð hŲ1 =0 9 9S öÇGÔÆ?£l% ê$% º·0 H e 0 * H ÷ ûÄÄD úªÀg ¸« y6íÛÜ*ú ºÝ¤¢ ~/vÝæBx ąæ,þPß ò Âï…j¦·tu¾ðì×v 5ã¸pñ ìçó%¡Òª ±Q| ½ jÆË ü fK0 $ö4 }| `óq( ÈÄ· ®jÈÑ §?)ÍTÀ a ìø&¸7¡ï#¼£> Îer ¤ÑÍ ¨ \zHkN© <5 ýò¼F4ó »¨"\ Á Ô dêGivo&D օY\¸ì äAÏáî lã!1À ±_4ñ g4t Cá ² !~)Hî Æ$ ã¦Úø)>e ,èòSûtÖ·ú$,y
2
0
283
3w
pkg 签名
我创建了一个developer id instanller 证书,并且安装在自己电脑上,我使用productbuild --component xx.app /Applications --sign "Developer ID Installer: " --product xx.app/Contents/Info.plist ST.pkg签名并生成pkg,使用 spctl -a -v --type install ST.pkg 去验证签名的时候,出现rejected source=Unnotarized Developer ID,我不知道哪里有问题,将pkg安装到其他电脑也会出现pkg无法打开,apple无法检查是否包含恶意软件 提示信息,希望可以得到大家的帮助谢谢,
1
0
280
3w
Certificates, Identifiers & Profiles duplicatedcertificate
In my developper account, "Certificates, Identifiers & Profiles" show two "Developer ID Installer" certificates (Expiration Date 2027/05/13 and 2027/02/01) I did not found any way to delete, remove or revoke one. How can I fix it ? Xcode complaint "Command CodeSign failed with a nonzero exit code" Previouly I put right this error with the command: xattr -cr path_to_application but this no longer work.
2
0
335
3w
My ID has been changed.
I got into trouble setting up my X-Code team ID. My user ID suddenly changed. Please take a look at the first screenshot. This is the certificate I was originally using, and I got a new certificate because it's about to expire. The new certificate is the second screenshot. But you can check that the ID is different. The problem is that the Apple login function is not working properly because the ID is different (I'm using Unity to develop a game) Can you tell me why the user ID has changed and I can't change it to the original one?
1
0
274
4w
Adding different capabilities to a Distribution profile for visionOS and iOS app
I have an app that runs on both iOS and visionOS (native). Both app use the same project, just some files and code segments are different. We do not use automatic signing. Instead we use a Distribution profile. When creating a distribution profile and adding capabilities there are certain capabilities we are using on iOS that are not available on visionOS. Like the com.apple.developer.kernel.increased-memory-limit and the Extended Virtual Addressing Entitlement. My understanding is that we can only have one Distribution profile per app (may be wrong understanding). My question is how can we have two separate distribution profiles for iOS and visionOS, so iOS can have those extra capabilities that aren't available on visionOS? I tried to create two separate targets, one for iOS and one for visionOS, but that still gives me the same issue of having the distribution profile being the same and not being able to make it unique for iOS and visionOS. Is there a correct approach to setting up the Xcode project or the distribution profile? I'm new to visionOS development and distribution profiles, any guidance would be appreciated. Let me know if you have any questions or need more clarification.
0
0
289
Jun ’24
Xcode Automatic Signing Shows Star Instead of Team ID
Hello everyone, I'm encountering an issue with Xcode's automatic signing feature. I've enabled "Automatically manage signing" and selected my development team, but instead of displaying the team ID, Xcode shows a star (*) in its place. Here's a bit more context: "Automatically manage signing" is enabled in the project settings. The selected team works perfectly in other projects. I've double-checked that the team is properly set up and has valid signing certificates. Despite these steps, Xcode still displays a star (*) instead of the actual team ID. This issue is preventing me from proceeding with my project. Has anyone else experienced this problem or have any suggestions on how to fix it?
1
0
275
Jun ’24
error: exportArchive: "Runner.app" requires a provisioning profile with the Associated Domains and Push Notifications features.
When I build with Flutter, XCODE returns an error:error: exportArchive: "Runner.app" requires a provisioning profile with the Associated Domains and Push Notifications features. I use the automatic management signing, and the provisioning profiles include related features. What should I do?
1
0
398
Jun ’24
Add new capabilities to a Provisioning Profile
We have a MacOS app that we distribute outside of the App Store. The App has an embedded provisioning profile that is still valid. We would like to add the Associated Domains capability to the app ID. Does that require regenerating a new provisioning profile and embedding it into a new version of App? If we do that, does that mean that the old provisioning profile will become invalid and the old Apps that are still running with it will stop working? Is there a way to make the transition to the new provisioning profile smooth without any downtime?
5
0
394
Jun ’24
Conflict between capability User Assigned Device Name & Contacts notes entitlements
We have requested an additional capability called "User Assigned Device Name" for my application to Apple and got approved the same on for debug/adhoc/release environments . Since then we are facing issues on code signing. We are always getting the compiler error "* Provisioning profile "xxxxxxxxxxx" doesn't support the User Assigned Device Name capability." on both Debug and Release environment. There is another capability "contacts notes entitlements" that we got approved long back when it was not apart of Apple ID(additional capabilities) rather we got approved as a part of our provisioning profile. Suppose we removed "contacts notes entitlements" from the profile and deleted it from the entitlement folder the project compiled without any error. So we are strongly believes the conflicts on the "contacts notes entitlements" is the root cause. We are about to release the version and which is blocked due to this error. So kindly look in to this issue and do the needful asap. STEPS TO REPRODUCE Added user assigned device name capability from Signing & Capability Tab in project in settings. Added the team, valid provisioning profiles and try to sign in manually. Getting the error “Provisioning profile xxxxxxxxxxxx" doesn't support the User Assigned Device Name capability." Note: Already got approval for the “user assigned device name” . Which is listed under the app id.
19
0
665
Jun ’24
Team ID suddenly changed
I developed it as Unity. Originally, I updated Unity to the latest version to fix the problem of not being able to log in to Apple. That's when I found out my team ID had changed. The current Apple membership team ID is HBEMGSUAQ3, When I check "Automatically manage sing" in Xcode Selected with the team ID "ESB392LR64". Where did this team come from all of a sudden? I've only used "HVEMGSUAQ3" for a very long time. The change in ID was a test build while developing another project yesterday, but it changed then. If I manually select the provisioning profile of my project "Failed to install embedded profile for : 0xe800801f (Attempted to install a Beta profile without the proper entitlement.)" This error appears and the test installation is not possible.. So I created a new certificate, identifier, and profile. However, it continues to be created with the ID of "ESB392LR64". Keychain registration is also naturally registered with "ESB392LR64" status. Again, my team ID is "HVEMGSUAQ3" and there is no way to check "ESB392LR64" on my dev page... This situation suddenly appeared when my certificates were updated with the ID of "ESB392LR64" on June 12, and What I suspect is that I updated my MacBook to the latest version of OS on the day of the issue. Please let me know what's going on. I'm hoping it's not a big deal....
2
0
347
Jun ’24