I am trying to notarize a framework built for both platforms, arm64 and x8664 (universal). The framework contains a static library (fat file) which can't be notarized. I get the following errors in the log: "The binary is not signed." and "The signature does not include a secure timestamp." When I build only for one of the two architectures (non-fat file), the notarization works without any issues. Universal: % file libtbarcode11.a  libtbarcode11.a: Mach-O universal binary with 2 architectures: [x8664:current ar archive] [arm64] libtbarcode11.a (for architecture x8664): current ar archive libtbarcode11.a (for architecture arm64): current ar archive % lipo -info libtbarcode11.a Architectures in the fat file: libtbarcode11.a are: x8664 arm64   % codesign -v --verify libtbarcode11.a libtbarcode11.a: valid on disk libtbarcode11.a: satisfies its Designated Requirement arm64: % file libtbarcode11.a libtbarcode11.a: current ar archive % lipo -info libtbarcode11.a Non-fat file: libtbarcode11.a is architecture: arm64 % codesign -v --verify libtbarcode11.a libtbarcode11.a: valid on disk libtbarcode11.a: satisfies its Designated Requirement codesign commands I tried so far: codesign --force --verify --verbose --sign "MyDeveloperIDApplicationCert" libtbarcode11.a codesign --force --verify --verbose --sign "MyDeveloperIDApplicationCert" --options runtime libtbarcode11.a codesign --force --verify --verbose --sign "MyDeveloperIDApplicationCert" --deep libtbarcode11.a