Post not yet marked as solved
(I posted this in the "Distribution >> App Submission and Review" forum 2 days ago but it has not received a response. Trying here...)I had to rebuild my iMac a few months ago and I restored from my Time Machine backup.I now need to make a change to an app but what used to compile without error is now failing at the codesign step with:Signing Identity: "-"As far as I can see, all of the account profiles are valid with expiry dates in the future. The only 'odd' thing is that some have a 'Download' button in the 'Action' column of the 'Provisioning Profiles' seciotn of the account details - when I select the "Download All Profiles" button, they turn grey but never seem to download or disappear (even after aiting for several hours!). Looking at the 'developer' web page, all of my certificates and provisioning profiles are all active.Any ideas welcomedThanksSusan
Post not yet marked as solved
Hi,my apps run on the iOSSimulator without problems and used to run on devices as well, but after updating to latest XCode-Version I am getting the above error message when trying to run an app on my iPhone 7. It says :"codesign wants to access key "access" in your bunch of keys . To allow this enter your password".... but my apple-Developer-ID-Password doesn't work. And until updating to latest XCode-Version I never had any problems with codesign when running an app on iPhone device.Any hints what's going wrong ?XCode Version 9.1 (9B55)iOS Version 11.1.2 (15B202)Latest High Sierra Version, macbook Pro 2015
Post not yet marked as solved
I have an app at App Store from past two years, now I want to update that app with my recently created new version app for iOS11+ support.My old app has different Xcode project and new app with different. in this case, xcode says to me keep a unique bundle id. So how can I update my old app with a new Xcode project, with the same bundle id...
Post not yet marked as solved
Hello,I am new to ios development. On the internet I have found tutorials how to create a free (restricted) developer account however in this tutorials there are different descriptions how to register an iOS device with the acount in xcode in order to install apps that I develop.Is there any official tutorial from apple how to do this?Or can some member of Apple staff confirm that this tutorial https://developer.xamarin.com/guides/ios/getting_started/installation/device_provisioning/free-provisioning/ work for Xcode version 9.2, please?Thanks in advancePetra
Post not yet marked as solved
I get the below error while I build the app for a deviceProvisioning profile "######" doesn't include signing certificate "##########".Provisioning profile "########" doesn't include the currently selected device "#########".What do I need to do to resolve this?
Post not yet marked as solved
I hope the pending antitrust suits force Apple to allow us to sign and provision our own apps for more than a week. For the price paid I should be able to write my own apps and use them without restriction outside of Apple services such as iCloud and so on. I understand distribution restrictions but please kill that 1 week annoyance, give me some level of freedom over my own apps on my own device.
Or I hope it’s forced.
Cheers and Thanks in advance.
Post not yet marked as solved
We seem to be dealing with a weird issue where the clinical health records entitlement keeps on getting added into our final embedded.mobileprovision when we prepare a build for distribution.
We seem to get this in the final package.
<key>com.apple.developer.healthkit.access</key>
<array>
<string>health-records</string>
</array>
But in our projects entitlement file there is no reference to health records. Below is the raw values inside of this file.
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>aps-environment</key>
<string>development</string>
<key>com.apple.developer.healthkit</key>
<true/>
<key>com.apple.developer.healthkit.access</key>
<array/>
<key>com.apple.security.application-groups</key>
<array>
<string>group.xxxxx</string>
</array>
</dict>
</plist>
And also in the project this isn't selected in the capabilities section either. Has anyone come across this issue before where Xcode automatically adds clinical records even though you haven't selected the checkbox.
Post not yet marked as solved
All identifiers updated in summer 2020 has new value for keychain-access-groups - com.apple.token. What is its purpose? What can happen if this value will not be added to entitlements?
Post not yet marked as solved
I would like to know on a mdm managed supervised device, how to force use Safari if a user has non-safari browser set as default.
can enforcing safari for a domain or web clip be done?
even shortcuts now, when using safari it opens whatever is set as default browser. Ironically if same simple shortcut of open URL with Chrome is created it opens with Chrome, regardless if default browser is set to firefox for example
this default browser setting is great for personal use but cause issues now for corporate use for me
anybody else figure this out? Also affects certificates for our managed devices
Post not yet marked as solved
Trying to validate an app for upload to mac app store. Using Big Sur, and Xcode 12.2
App will not validate. This is for an existing app I'm trying to update. It updated peffectly week just 2 weeks ago with Xocode 11.xx and Catalina. It was rejected a week ago for metadata concerns. I've corrected metadata concerns, and am trying to submit a new binary.
I've tried validating the same bundle with a diffreent app id, and everything goes prefectly and is validated.
Here is what the non-validation looks like:
SUMMARY
Team: XXXXXXX
Certificate: Apple Distribution (Expires 10/31/21)
Profile: Mac Team Store Provisioning Profile: com.XXXX.XXXX
Symbols: Included
Architectures: Intel 64-bit
ENTITLEMENTS
com.apple.security.files.user-selected.read-write
true
com.apple.application-identifier
XXXX.com.XXXX.XXXX
com.apple.developer.team-identifier
XXXXXXXX
com.apple.security.app-sandbox
true
******
The result = Not Validated
*
Error message Xcode displayed.
Unable to process application at this time due to the following error: Invalid Provisioning Profile. The provisioning profile included in the bundle com.XXXX.XXXX [com.XXXX.XXXX.pkg/Payload/XXXXYYYY.app] is invalid. [Invalid 'com.apple.application-identifier' entitlement value.] For more information, visit the macOS Developer Portal..
* end error message********
Any thoughts or suggestions???
Thanks in advance.
Post not yet marked as solved
In Xcode I get the following errors when signing :
Failed to create provisioning profile. There are no devices registered in your account on the developer website. Plug in and select a device to have Xcode register it.
No profiles for 'app.name.com' were found Xcode couldn't find any iOS App Development provisioning profiles matching 'app.name.com
I logged in to my dev account in &lt;Certificates, Identifiers &amp; Profiles&gt;, and created my device, and when I try to create a Profile I get the error : No Devices are available ,
If I click in create new device, and try to register my MacBook Pro, its says : The following devices are either already present and were not modified or contain invalid identifiers.
How can I resolved this ?
Post not yet marked as solved
Hi! I need to transfer an app, which is already available in the App Store, from one developer to another.
The new developer account (one to receive the app) has problems building the app for the local testing iPhone device, Xcode giving the error messages:
"Failed to register bundle identifier"
(The app identifier "com.app.name" cannot be registered to your development team because it is not available. Change your bundle identifier to a unique string to try again.)
and
"No profiles for 'com.app.name' were found"
(Xcode couldn't find any iOS App Development provisioning profiles matching 'com.app.name')"
Obviously, Bundle ID isn't unique, as the app already exists on the App Store, but he's only trying to build for the local iPhone to preview the app.
I need to be sure the new developer will be able to compile/build the application before we initiate the transfer of the app from one account to another. Also, the new dev has not yet paid for the APPLE DEVELOPER PROGRAM.
Should we change the Bundle ID temporarily to be able to test the app?
Thank you in advance!
Post not yet marked as solved
I am trying to compile Xcode project on an online platform Bitrise. I am facing issue with sign in and provisioning .. after trying 4-5 days I am approaching you.
Please solve this.
❌ error: No profiles for 'my app bundle id' were found: Xcode couldn't find any iOS App Development provisioning profiles matching 'my app bundle id'. Automatic signing is disabled and unable to generate a profile.
To enable automatic signing, pass -allowProvisioningUpdates to xcodebuild. (in target 'myapp-Development' from project 'myapp')
How to enable this "allowProvisioningUpdates"
also why it is too difficult to do such processes with apple development.. I tried for android and it compiled successfully in a single attempt.
please help.
Post not yet marked as solved
When I try to add HealthKit capabilities to my app, I get the following signing errors:
Communication with Apple failed. Your account does not have sufficient permissions to modify containers.
Provisioning profile "iOS Team Provisioning Profile: com.domain.app" doesn't support the HealthKit capability.
Provisioning profile "iOS Team Provisioning Profile: com.domain.app" doesn't include the com.apple.developer.healthkit and com.apple.developer.healthkit.access entitlements.
In my developer account, the HK capability is enabled. And the entitlements needed are automatically generated by Xcode when I add HK capability, if I try to add them, it says they're already there.
I have automatically managed signing selected. Clinical health records are not enabled for Health Kit. Common solutions like cleaning, derived data, and restarts don't help.
Does anybody know what this is?
We're attempting to build and distribute our MacOS game via TestFlight and are met with an error or multiple errors regarding "com.apple.developer.arcade-operations".
Either we exclude the entry from our entitlements file used to sign and get this single error:
ITMS-90769: Invalid Bundle - Apple Arcade apps require the 'com.apple.developer.arcade-operations' entitlement.
Or we add it to the entitlements and get this error:
ITMS-90287: Invalid Code Signing Entitlements - The entitlements in your app bundle signature do not match the ones that are contained in the provisioning profile. The bundle contains a key that is not included in the provisioning profile: 'com.apple.developer.arcade-operations' in 'com.[CompanyIdentifier.GameName].pkg/Payload/[GameName].app/Contents/MacOS/[GameName]'.
We're unsure of how to properly "include the key'' in the provisioning profile. There are no options to do such a thing on the developer.apple website where they're created/editable and I can't just add it to the Entitlements <dict> in the .provisionprofile file itself.
Is there a way we can "add the entitlement to the provisioning profile"? It's a Mac App Store Distribution profile as that's the only one TestFlight is accepting. If we use any other profile we'll get:
ITMS-90283: Invalid Provisioning Profile - The provisioning profile included in the bundle com.[CompanyIdentifier.GameName] [com.[CompanyIdentifier.GameName].pkg/Payload/[GameName].app] is invalid.
Post not yet marked as solved
When I download my provisioning profile I can't find the com.apple.developer.carplay-audio entitlement in it.
Here's what I did:
For our app identifier on Apple Developer Portal in "Additional Capabilities" I enabled "CarPlay Audio App (CarPlay framework)".
After that I generated a provisioning profile and downloaded it. In the provisional profile info on Apple Developer Portal I can see "CarPlay Audio App (CarPlay framework)" in "Enabled Capabilities".
When I import the downloaded profile in Xcode, I can't see the CarPlay entitlement there. After I added the "com.apple.developer.carplay-audio" entitlement to my .entitlements file, I'm getting the "Provisioning profile ... doesn't include the com.apple.developer.carplay-audio entitlement.". When I'm opening the profile in my text editor, I also can't find "carplay-audio" there.
Is there a way to solve this problem?
Post not yet marked as solved
General:
DevForums tags: Code Signing, Signing Certificates, Provisioning Profiles, Entitlements
Developer Account Help — This document is good in general but, in particular, the Reference section is chock-full of useful information, including the names and purposes of all certificate types issued by Apple Developer web site, tables of which capabilities are supported by which distribution models on iOS and macOS, and information on how to use managed capabilities.
Developer > Support > Certificates covers some important policy issues
Entitlements documentation
TN3125 Inside Code Signing: Provisioning Profiles — This includes links to other technotes in the Inside Code Signing series.
WWDC 2021 Session 10204 Distribute apps in Xcode with cloud signing
Certificate Signing Requests Explained DevForums post
--deep Considered Harmful DevForums post
Don’t Run App Store Distribution-Signed Code DevForums post
Resolving errSecInternalComponent errors during code signing DevForums post
Finding a Capability’s Distribution Restrictions DevForums post
Signing code with a hardware-based code-signing identity DevForums post
Mac code signing:
DevForums tag: Developer ID
Creating distribution-signed code for macOS documentation
Packaging Mac software for distribution documentation
Placing Content in a Bundle documentation
Embedding Nonstandard Code Structures in a Bundle documentation
Embedding a Command-Line Tool in a Sandboxed App documentation
Signing a Daemon with a Restricted Entitlement documentation
Defining launch environment and library constraints documentation
WWDC 2023 Session 10266 Protect your Mac app with environment constraints
TN2206 macOS Code Signing In Depth archived technote — This doc has mostly been replaced by the other resources linked to here but it still contains a few unique tidbits and it’s a great historical reference.
Manual Code Signing Example DevForums post
The Care and Feeding of Developer ID DevForums post
TestFlight, Provisioning Profiles, and the Mac App Store DevForums post
For problems with notarisation, see Notarisation Resources. For problems with the trusted execution system, including Gatekeeper, see Trusted Execution Resources.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"
Post not yet marked as solved
Hi, I'm trying to integrate with Tap to Pay feature under Stripe. For this reason i need to add com.apple.developer.proximity-reader.payment.acceptance entitlement to my Identifier. I can see it under Provisioning Profile -> Enabled Capabilities.
But after downloading this profile in Xcode I don't see this entitlement.
What could be the reason for this discrapency?
Is there a way to get the new com.apple.developer.device-information.user-assigned-device-name entitlement to work with automatically managed signing, or is it required to change to manual signing to use this entitlement?
Someone else had the same problem as me in this reply on another post: https://developer.apple.com/forums/thread/708275?answerId=730156022#730156022 but it was suggested they start a new thread but I don't think they started such a thread so I am.
I was hoping, perhaps naively, that after getting approval for the entitlement and adding it to our entitlements file that it would "just work" but i'm getting the error:
Provisioning profile "iOS Team Provisioning Profile: [redacted bundle id]" doesn't include the com.apple.developer.device-information.user-assigned-device-name entitlement.
Really hoping to avoid having to manually manage signing or at least know for sure that it is unavoidable before I move to it.
I got a nice new iPhone to do some debugging on and I'm trying to run my application from Xcode on the new phone. When I run the application it fails and in the "Details" of the failure it tells me that the provisioning profile is invalid:
"A valid provisioning profile for this executable was not found"
Using "Automatically Manage Signing" and choosing my development team, when I click on the little (i) button next to "Xcode managed Profile" I see all check marks. Xcode seems to think I have everything I need. I do see my device listed in the supported devices area.
I have turned "Automatically Manage Signing" off and on (to regenerate the profile) and I've tried manually copying the profile to the phone (emailing it to myself, and using AirDrop). The phone complains that the profile is invalid.
Kicking it old school, I went to my account and created a new development signing certificate, and a provisioning profile that includes my device. I tried using Xcode with the manual certificate and profile and got the same result.
All in all it looks like my phone refuses to accept a provisioning profile. Is there anything more I can try to allow me to use my device for debugging.
(I have tried using Xcode 14 and 14.1b5, and while my phone is running both 16.1b4 and 16.1b5).