Certificate Revocation Impact

Question

Created Feb ’21

Replies 3

Boosts 0

Views 2.7k

Participants 4

Background
We are using a Developer ID application certificate to sign our application. We lost the private key and we need to revoke it before we can receive a new one.

Per documentation (https://developer.apple.com/support/certificates/), I know that previously installed applications will still be able to run, but new installations will not be able to work.

I want to confirm what will happen when we revoke the certificate so we know how to prepare customers for this upcoming change.

Questions

Will existing installations of the application receive a notice that the certificate has been revoked?
Will previously installed applications be able to launch again after they are closed?
What will the user see when they try to install the application with the revoked certificate?

Boost

Answer 1

NextApple OP

Nov ’22

Hello, I'm interested to know the answers please. Did you got any?

0

Answer 2

DTS Engineer OP

Apple

Nov ’22

See Developer > Support > Certificates.

In general you would not revoke a Developer ID certificate just because you lost the private key. Developer ID revocation is an extremem measure, reserved for situations where the private key has been compromised.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0

Answer 3

Archangelonelay OP

Mar ’23

When you revoke an Apple enterprise certificate, all applications signed with that certificate will become invalid and cannot be installed or updated.

Additionally, any configuration profiles, VPN settings, or other mobile device management (MDM) features that rely on your enterprise certificate will also become invalid.

If you revoke a certificate and wish to continue using your applications and mobile device management features, you will need to re-sign your applications and configuration profiles with another valid enterprise certificate and install these updates on your mobile devices. If you use a mobile device management (MDM) solution, you may also need to reconfigure your MDM server to use the new certificate.

1