Code Signing Resources

General:

• DevForums tags: Code Signing, Signing Certificates, Provisioning Profiles, Entitlements

• Developer Account Help — This document is good in general but, in particular, the Reference section is chock-full of useful information, including the names and purposes of all certificate types issued by Apple Developer web site, tables of which capabilities are supported by which distribution models on iOS and macOS, and information on how to use managed capabilities.

• Developer > Support > Certificates covers some important policy issues

• Entitlements documentation

• TN3125 Inside Code Signing: Provisioning Profiles — This includes links to other technotes in the Inside Code Signing series.

• WWDC 2021 Session 10204 Distribute apps in Xcode with cloud signing

• Certificate Signing Requests Explained DevForums post

• --deep Considered Harmful DevForums post

• Don’t Run App Store Distribution-Signed Code DevForums post

• Resolving errSecInternalComponent errors during code signing DevForums post

• Finding a Capability’s Distribution Restrictions DevForums post

• Signing code with a hardware-based code-signing identity DevForums post

Mac code signing:

• DevForums tag: Developer ID

• Creating distribution-signed code for macOS documentation

• Packaging Mac software for distribution documentation

• Placing Content in a Bundle documentation

• Embedding Nonstandard Code Structures in a Bundle documentation

• Embedding a Command-Line Tool in a Sandboxed App documentation

• Signing a Daemon with a Restricted Entitlement documentation

• Defining launch environment and library constraints documentation

• WWDC 2023 Session 10266 Protect your Mac app with environment constraints

• TN2206 macOS Code Signing In Depth archived technote — This doc has mostly been replaced by the other resources linked to here but it still contains a few unique tidbits and it’s a great historical reference.

• Manual Code Signing Example DevForums post

• The Care and Feeding of Developer ID DevForums post

• TestFlight, Provisioning Profiles, and the Mac App Store DevForums post

For problems with notarisation, see Notarisation Resources. For problems with the trusted execution system, including Gatekeeper, see Trusted Execution Resources.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"