Which part to be notarized in a pkg, .app or pkg or both ?

Question

Created Feb ’21

Replies 1

Boosts 0

Participants 2

Hi,
I have to publish a macOS application outside the AppStore, downloadable from another a third-party website.

I have to build an app say for example myapp.app and then pack it inside a package installer .pkg file

users will download and run pkg to install the app.

Which part in the least should be Notarized & signed, the app has to run on catalina 10.14 & newer versions

Should .app and .pkg both should be signed and notarized or .pkg is enough to be signed & notarized ? if some one can direct me to any documentation on this subject along with answer, that would be great.
Thanks,
Ahmed

Boost

Answer 1

DTS Engineer OP

Apple

Feb ’21

My general advice is that you sign everything, from the inside out, and then notarise the outermost container. So, for example, if you have an app inside an installer package on a disk image, sign the app, sign the installer package, sign the disk image, and then notarise the disk image. The resulting ticket will cover all the nested items.

For more hints and tips on this topic, see Signing a Mac Product For Distribution.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

0