notarytool gives Error: Missing value for '-i <issuer>'

Question

Flintstone OP

Created Aug ’21

Replies 2

Boosts 0

Views 1k

Participants 2

I'm trying to get setup using notarytool and I keep getting back this message...

Error: Missing value for '-i <issuer>'
Usage: notarytool submit <options>
  See 'notarytool submit --help' for more information.

I'm using the form...

xcrun notarytool submit \<path to product\>  --verbose  --apple-id \<an Apple ID\>  --password \<Application Password\>  --team-id \<our Team ID\>  --progress  --wait

All the examples I can find do not use the -I parameter so I'm not sure why it want it.

So, how do I get the Issuer ID so I can put it in and see if it makes things happy?

I see posts saying it is accessible at this URL... https://appstoreconnect.apple.com/access/api

But for me it is not. I also saw a reference saying that the team Agent has to enabled this functionality. But I'm not sure how they would do that. I am an Admin on the account but not the Account Holder.

Is this really necessary for making the call to notarytool or is there something else going on here?

So, does the Account Holder need to click a box somewhere so I can see the Issuer ID?

If so, can someone give me specifics that I can pass on to our Account Holder?

Any other thoughts that might help me?

Boost

Answer 1

DTS Engineer OP

Apple

Aug ’21

All the examples I can find do not use the -i parameter so I'm not sure why it want it.

The Issuer ID is normally only needed if you’re using key-based authentication. I just posted an example of that to this thread.

I suspect that there’s something in your command that’s confusing the argument parser. For example, if the path to your product started with -i, notarytool would interpret that as a -i option. However, it’s hard to be sure without seeing a non-redacted version of that command.

As with all notarisation authentication problems, I recommend that you start with the simplest possible command just to test your authentication. When using notarytool, that’s the history command. Can you get that to work?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0

Answer 2

Flintstone OP

Aug ’21

Thanks very much. I didn't have anything like -i, but may name/password were kinda mangled (they were environmental variables). I was messing with how to get the right data there and all of a sudden it started working. So it was just a case of the parser getting ,confused and throwing the wrong error at me. Only cost me a couple days.

Anyway, thanks for the information. I hope it saves someone else from these hassles.

0