Broken Developer Certificates and Profiles

Question

Created Sep ’20

Replies 5

Boosts 0

Views 2.1k

Participants 4

I am extremely worried about my certificates/profiles and need help fixing the issue. I have my app in the Apple app store for iPhone, iPad, and Mac and have sent out multiple updates. I just recently updated my Xcode to Xcode 12 and can no longer send my Mac Catalyst version of the app to Apple's notary service and get these errors:

Cannot create a Mac Catalyst Developer ID provisioning profile for "". The App Groups capability is not available for Mac Catalyst Developer ID provisioning profiles. Disable this feature and try again.

Provisioning profile failed qualification Profile doesn't include the selected signing certificate.

Provisioning profile failed qualification Profile doesn't support App Groups.

Before this point, I had not generated a new Developer ID profile since February and have had App Groups in my app for many months and sent out multiple updates and notaries with it. After tons of research, I saw that it maybe has something to do with my Developer ID Profile so I looked into it on the Apple developer website and saw that the status said invalid. I made a new one, removed the invalid one, and tried the steps of archiving a new build and trying to send it to Apple's notary but ended up getting the same error.

I have done more research and stumble upon https://developer.apple.com/support/certificates/ and saw that removing a profile may cause me to not update my current apps in the app store. Did I remove my entire access to update my apps???

I still can not figure out the notary issue and am now extremely worried that I have messed up my chances of updating my app again. Can you please help me with both issues?

I have a Mac update I would like to send out to the App Store as soon as possible but want to know if it's safe before sending it to users.

Boost

Answer 1

DTS Engineer OP

Apple

Sep ’20

saw that removing a profile may cause me to not update my current apps
in the app store

I’m not sure how you came to that interpretation. Let me reassure you that it really is quite hard to mess things irretrievably (1). I’ll do what I can to help you out here but this may need more time than I can allocate in this context, in which I’ll ask you to open a DTS tech support incident.

Anyway, first things first, what are your deployment targets? You wrote:

I have my app in the Apple app store for iPhone, iPad, and Mac

This sounds like your Mac app ships via the Mac App Store. But elsewhere in your post you mentioned Developer ID and the notary service, which make it sound like your Mac app ships outside of the Mac App Store. Which is it?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

(1) Indeed, the only thing that’s hard to recover from is creating and then loosing (or leaking) a bunch of Developer ID private keys. See this post for more on that.

1

Answer 2

helper132 OP

Sep ’20

Hi @eskimo! Thank you so much for responding I have spent the weekend trying to figure this out and nothing is still working :(

My iPhone/iPad and Mac Catalyst app all ship via App Store. Before I submit any Mac update to App Store Connect I always send it to Apple's notary system (via distributing it to Developer ID) so I can export it and test the app out on a separate Mac just to have a piece of mind that the build is working well.

I have an update ready and tried my usual routine of sending it to the notary system and I get those errors. I have had app groups in my app for a long time and haven't changed anything with it. The only change was updating my Xcode to Xcode 12.

0

Answer 3

DTS Engineer OP

Apple

Sep ’20

My iPhone/iPad and Mac Catalyst app all ship via App Store.

OK, thanks for clarifying. Mac Catalyst is an interesting hybrid between iOS and macOS, in that recent systems have started enforcing iOS-style App Group rules for Mac Catalyst apps. Unfortunately I’m not fully up to speed on these changes. I recommend that you open a DTS tech support incident so that I can research this in depth.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

2

Answer 4

girishw OP

Dec ’20

Any updates on this? I am running into the same problem. In my case, I ship the beta builds using Developer ID but will be listing the app in the Mac App Store when I launch.

0

Answer 5

MyMattes OP

Nov ’21

I just ran into the same issue ... any updates? My app is not fit for a MAS submission, but I'd like to use the notary service to test it internally on several Macs (also from users not part of the dev team).

0