Apple Developer Certificates: what changed
Revision 2 to 3. Removed lines have a minus sign; added lines have a plus sign.
| Old | New | Line | |
|---|---|---|---|
| 1 | - | ||
| 2 | - | ||
| 3 | - | ||
| 4 | - | ||
| 5 | - | ||
| 6 | - | ||
| 7 | - | ||
| 8 | - | ||
| 9 | - | ||
| 10 | - | ||
| 11 | - | ||
| 12 | - | ||
| 13 | - | ||
| 1 | + | *(macOS only)* | |
| 14 | 2 | ||
| 15 | - | ||
| 16 | - | ||
| 17 | - | ||
| 18 | - | ||
| 19 | - | ||
| 20 | - | ||
| 21 | - | ||
| 22 | - | ||
| 23 | - | ||
| 24 | - | ||
| 25 | - | ||
| 26 | - | ||
| 27 | - | ||
| 28 | - | ||
| 29 | - | ||
| 30 | - | ||
| 31 | - | ||
| 3 | + | *(iOS only)* | |
| 32 | 4 | ||
| 33 | 5 | ## Overview | |
| 34 | 6 | ||
| 35 | - | ||
| 36 | - | ||
| 37 | - | ||
| 7 | + | This article deals with the various certificates available to someone who has signed up and paid for the [Apple Developer Program](https://developer.apple.com/programs/) and describes which certificate to use for what. Given the number and names of the various certificates it can be somewhat daunting to figure out which certificate is used for what. | |
| 38 | 8 | ||
| 39 | - | ||
| 9 | + | Finally, there is a description of the consequences of expired and revoked certificates. | |
| 40 | 10 | ||
| 41 | - | ||
| 11 | + | > **Warning:** It is not possible to use certificates from third-party providers like Comodo and DigiCert because they will not pass Gatekeeper which requires an Apple developer issued certificate. Also note that you cannot sign Windows applications with the Apple developer certificate (this time you do need a third-party Comodo, DigiCert etc certificate). | |
| 42 | 12 | ||
| 43 | 13 | ## Xcode 11 | |
| 44 | 14 | ||
| 45 | - | ||
| 15 | + | Xcode 11 supports the new *Apple Development* and *Apple Distribution* certificate types. These certificates support building, running, and distributing apps on any Apple platform. Preexisting iOS and macOS development and distribution certificates continue to work, however, new certificates you create in Xcode 11 use the new types. Previous versions of Xcode don’t support these certificates. | |
| 46 | 16 | ||
| 47 | 17 | ### Apple Development Certificate | |
| 48 | 18 | ||
| 49 | - | ||
| 19 | + | This certificate is used to sign development versions of your iOS, macOS, tvOS, and watchOS applications. For use in Xcode 11 or later. | |
| 50 | 20 | ||
| 51 | 21 | ### Apple Distribution Certificate | |
| 52 | 22 | ||
| 53 | - | ||
| 23 | + | This certificate is used to sign your applications for submission to the App Store for distribution. For use with Xcode 11 or later. | |
| 54 | 24 | ||
| 55 | 25 | ## macOS app distribution via the Mac App Store | |
| 56 | 26 | ||
| 57 | 27 | ### Mac Development Certificate | |
| 58 | 28 | ||
| 59 | - | ||
| 29 | + | This certificate is used to sign development versions of your Mac applications for testing and debugging. It enables certain app services during development and testing. | |
| 60 | 30 | ||
| 61 | 31 | ### Mac App Distribution Certificate | |
| 62 | 32 | ||
| 63 | - | ||
| 33 | + | This certificate is used to code sign your application and configure a Distribution Provisioning Profile for submission to the Mac App Store. | |
| 64 | 34 | ||
| 65 | 35 | ### Mac Installer Distribution Certificate | |
| 66 | 36 | ||
| 67 | - | ||
| 37 | + | This certificate is used to sign your application's Installer Package for submission to the Mac App Store. | |
| 68 | 38 | ||
| 69 | 39 | ## macOS app distribution outside the Mac App Store | |
| 70 | 40 | ||
| 71 | - | ||
| 41 | + | The certificate types for distribution of macOS applications outside the Apple Mac App Store: | |
| 72 | 42 | ||
| 73 | 43 | ### Developer ID Application Certificate | |
| 74 | 44 | ||
| 75 | - | ||
| 45 | + | This certificate is used to code sign your application for distribution outside of the Mac App Store. Note that kernel extensions require a special certificate and that they are now deprecated anyway. | |
| 76 | 46 | ||
| 77 | 47 | ### Developer ID Installer Certificate | |
| 78 | 48 | ||
| 79 | - | ||
| 49 | + | This certificate is used to sign your application's Installer Package (if any) for distribution outside of the Mac App Store. | |
| 80 | 50 | ||
| 81 | 51 | ## Expired or revoked certificates | |
| 82 | 52 | ||
| 83 | 53 | ### Mac App Distribution Certificate and Mac Installer Distribution Certificate (Mac App Store) | |
| 84 | 54 | ||
| 85 | - | ||
| 55 | + | If your Apple Developer Program membership is valid, your existing apps on the Mac App Store will not be affected. However, you will no longer be able to upload new apps or updates signed with the expired or revoked certificate to the Mac App Store. | |
| 86 | 56 | ||
| 87 | 57 | ### Developer ID Application Certificate (Mac apps) | |
| 88 | 58 | ||
| 89 | - | ||
| 59 | + | If your certificate expires, users can still download, install, and run versions of your Mac applications that were signed with this certificate. However, you will need a new certificate to sign updates and new applications. If your certificate is revoked, users will no longer be able to install applications that have been signed with this certificate. If your Mac application utilizes a Developer ID provisioning profile to take advantage of advanced capabilities such as CloudKit and push notifications, you must ensure your Developer ID provisioning profile is valid in order for installed versions of your application to run. | |
| 90 | 60 | ||
| 91 | 61 | ### Developer ID Installer Certificate (Mac apps) | |
| 92 | 62 | ||
| 93 | - | ||
| 63 | + | If your certificate expires, users can no longer launch installer packages for your Mac applications that were signed with this certificate. Previously installed apps will continue to run however new installations will not be possible until you have re-signed your installer package with a valid Developer ID Installer certificate. If your certificate is revoked, users will no longer be able to install applications that have been signed with this certificate. | |
| 94 | 64 | ||
| 95 | 65 | ## See also | |
| 96 | 66 | ||
| 97 | - | ||
| 98 | - | ||
| 67 | + | - [[Code Signing for macOS]] | |
| 68 | + | - [[Notarization for macOS 10.14.5+]] | |
| 99 | 69 | ||
| 100 | 70 | ## External links | |
| 101 | 71 | ||
| 102 | - | ||
| 72 | + | - [Apple Guidelines and Resources](https://developer.apple.com/app-store/resources/) | |
| 103 | 73 | ||
| 104 | 74 | --- | |
| 105 | - | ||
| 75 | + | *From the Free Pascal wiki, page "Apple Developer Certificates", as it stood on 2021-02-05 after a change by Trev, out of the wiki's dump of 2024-05-26. Copyright stays with the author who wrote it, according to the old wiki's [[Licensing]] page. If you have concerns about this material, [message the admin](/wiki-contact).* | |
| 76 | + | Category: Code signing | |
| 77 | + | Category: Notarization | |
| 78 | + | Category: iOS | |
| 79 | + | Category: macOS |