How to delete certificates?

Question

Created Feb ’21

Replies 10

Boosts 1

Views 11k

Participants 7

How to delete certificates from "Certificates, Identifiers & Profiles?"

I have a new Mac and need to create new certificate for it but there is no option of deleting or editing of the existing certificates. When trying to add a new one the option is greyed out with the following commend:

Developer ID Application
This certificate is used to code sign your app for distribution outside of the Mac App Store.

Maximum number of certificates generated.

Boost

Answer 1

Lanek OP

Feb ’21

I should add: There is no REVOKE option for "Developer ID Application" certificate type as there is for other certificates types like for example when you edit the "iOS Distribution Certificate".

0

Answer 2

Lanek OP

Feb ’21

I just called Apple and learned that because of Apple system limitations you cannot delete "Developer ID Application" certificates.
Apparently, the only option is to export the "Developer ID Application" from the old mac and import it to the new one using the Keychain Access. Of course, there are all kinds of new problems and obstacles. Does anybody know how to transfer correctly the "Developer ID Application" certificate from one Mac to another?

0

Answer 3

DTS Engineer OP

Apple

Feb ’21

you cannot delete "Developer ID Application" certificates

Indeed. Developer ID certificates are precious.

Does anybody know how to transfer correctly the "Developer ID
Application" certificate from one Mac to another?

I’ve not tried it with Developer ID digital identities — because they are precious I always manually manage them — but I’ve used the process described in Xcode Help > Maintain signing assets > Export signing certificates and provisioning profiles for other signing assets and it works a treat.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

0

Answer 4

Lanek OP

Feb ’21

Thank you so much! This worked like a charm.

0

Answer 5

yhnfc OP

Oct ’23

They're only precious if you know what you're doing. At one point, possible all points on a line, I didn't and don't.

I have finally figured out how to install the certificate (call it A) that was in my account at developer.apple.com. But before I found the cheap route, I created a certificate (call it B) that I fear I won't be able to use in 3 years when A expires. I will have forgotten everything and go through this whole mess again. So, I never intend to use B and would prefer to not be tempted to even try it.

0

Answer 6

pbesong OP

May ’24

These Apple certificates are ridiculous. They REALLY need a system to better manage these. I cringe every time I need to change computers because I know all my certificates will be messed up.

1

Answer 7

kdeda OP

Jun ’24

I added a second Developer ID Installer and I can't revoke the second one, not a big deal but yea it's not perfect. Now I have 2 of them.

0

Answer 8

abductedsea OP

Oct ’24

I am in the exact same boat as you are. I created a second certificate by logging off and logging on while debugging issues with provisioning profiles. This created a new developer certificate. I read we need to revoke it, since I didn't find any option to revoke and the next best thing I read was to delete the duplicate certificate. I assumed had the backup in my Time Machine and deleted the certificate without an export. Murphy won, I don't have a backup and no certificate now. There is a ghost certificate now on Xcode with "Not in keychain" message. Some of the bundle id I created are now associated with it and wouldn't let me reuse them. Any thoughts on how to get rid off it? I have sent a request to apple through https://developer.apple.com/support/ for revoking but no response yet for my ticket.

1

Answer 9

abductedsea OP

Oct ’24

and I don't see the inactive one when I run the command "security find-identity -v " in terminal either.

0

Answer 10

ClonedBob OP

2w

this is a big deal for me, as someone wrote some private frameworks that are signed with certificates with my team id that I can't revoke, and I didn't write that code, it's malware. Deverloper support just ignores my pleas to revoke the damn things.

0