App Management notification was triggered when all apps are signed by the same Team ID

I have an installer app which will download our macOS app from server (as zip) and extract it to the root folder of a USB flash drive. Both installer and the macOS app are code signed / notarized with the same Developer ID certificate and Team ID.

What to expect?

macOS Ventura should allow my installer to extract the app bundle to the root folder of the USB flash drive.

What happened?

macOS Ventura doesn't allow my installer to extract the app bundle to the root folder of the drive, App Management notification was triggered. It does allow my installer to extract the software to any subfolders on the USB drive.

I am forcing my users to enable Full Disk Access before installing the software to their USB drive, this is not ideal. Is it a bug of Gatekeeper?

Well, that’s definitely weird. The fact that it fails at the root but works within a subfolder seems particularly strange. I don’t have time here on DevForums to offer any deep insight, so you have a couple of options:

  • File a bug about this. If you do this, please post your bug number, just for the record.

  • Open a DTS tech support incident so that I can allocate more time look into it.

Or both (-:

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

App Management notification was triggered when all apps are signed by the same Team ID
 
 
Q