The entitlement, USB Transport and UserClient Access, doesn't work

Question

Created Aug ’21

Replies 1

Boosts 0

Participants 2

Hi, I have requested USB Transport and UserClient Access successfully, but the applications containing the entitlemet don't work.

driver.dext: User-mode usb driver
Driver.app: Application to install the user-mode driver

Error Termination Reason: Namespace CODESIGNING, Code 0x01

・entitlement file of driver.dext

	<key>com.apple.developer.driverkit</key>
	<true/>
	<key>com.apple.developer.driverkit.transport.usb</key>
	<array>
		<dict>
			<key>idVendor</key>
			<integer>****</integer>
		</dict>
	</array>

・entitlement file of Driver.app

	<key>com.apple.developer.driverkit.userclient-access</key>
	<array>
		<string>****bundle id of driver.dext</string>
	</array>

・driver.dext provisioning profile CMS command

 	<key>Entitlements</key>
	<dict>
  <key>com.apple.developer.driverkit.transport.usb</key>       
		<array>
		</array>
				<key>com.apple.developer.driverkit</key>
		<true/>
				<key>com.apple.application-identifier</key>		<string>bundle id</string>				
				<key>keychain-access-groups</key>
		<array>
				<string>****</string>
		</array>				
				<key>com.apple.developer.team-identifier</key>
		<string>****</string>
	</dict>

・Driver.app provisioning profile CMS command

	<key>Entitlements</key>
	<dict>				
				<key>com.apple.developer.system-extension.install</key>
		<true/>				
				<key>com.apple.application-identifier</key>		<string>bundle ID</string>				
				<key>keychain-access-groups</key>
		<array>
				<string>****.*</string>
		</array>				
				<key>com.apple.developer.team-identifier</key>
		<string>****</string>
	</dict>

Would you let me know the solutions if you have?

Boost

Answer 1

OP

Apple

Aug ’21

There's a couple of issues based on what is listed here.

The dext's provisioning profile doesn't contain any vendor IDs, is that correct? You won't be able to match against a specific vendor ID unless you have been granted access to that vendor ID.
Your app's provisioning profile doesn't contain the userclient-access entitlement. The entitlement will need to be added to your provisioning profile with content identical to what is in your entitlements file. That includes the specific bundle ID of the dext you are attempting to connect to.

0