Certificates, Identifiers & Profiles

RSS for tag

Discuss the technical details of security certificates, identifiers, and profiles used by the OS to ensure validity of apps and services on device.

Certificates, Identifiers & Profiles Documentation

Posts under Certificates, Identifiers & Profiles subtopic

Post

Replies

Boosts

Views

Activity

New Capabilities Request Tab in Certificates, Identifiers & Profiles
You can now easily request access to managed capabilities for your App IDs directly from the new Capability Requests tab in Certificates, Identifiers & Profiles > Identifiers. With this update, view available capabilities in one convenient location, check the status of your requested capabilities, and see any notes from Apple related to your requests. Learn more about capability requests.
0
0
2.8k
Jun ’25
Updating App - Validation Hell - 90286, 91130
Updating an App for the first time since 2011. Build, Analyze, Archive all successful. Automatically Manage Signing checked. Validation fails with 90286 - Invalid code signing entitlements, and 91130 - Invalid Provisioning Profile dozens of times after tweaks, clean builds, trying manual signing (thought I was done with that), etc. For 90286 it seems my Developer ID , e.g. 346JXXXXX (not Team ID, QZ99XXXXX) is the prefix for the bundle ID, com.company.app-name and that generates the error? For 91130 it's invalid "com.apple.application-identifier" which I assume is the same issue with a Developer ID instead of a Team ID. The original version of the app was QZ99XXXXX.com.company.app-name. I even changed the bundle identifier in Xcode to that, and got this: App Record Creation failed due to request containing an attribute already in use. The app name you entered is already being used for another app in your account. If you would like to use the name for this app you will need to submit an update to your other app to change the name, or remove it from App Store Connect. Yes, the original app name is being used for an app in my account. I was trying to update the app, checked all the boxes, added update text, but of course there was no build to upload. Would appreciate any help.
20
0
3.1k
2w
Xcode always uses free Team (CKY689QC8W) instead of paid Team (CK4269T4Q4) for code signing
I have a paid Apple Developer account (Team CK4269T4Q4, renewed until 2027/7/10), but Xcode always generates development certificates under my free personal Team (CKY689QC8W) instead of the paid one. What I've tried: Deleted all certificates from Keychain → Xcode regenerates under CKY689QC8W Revoked all certificates on developer.apple.com → same result Manually created CSR + uploaded certificate → still CKY689QC8W Signed out/in of Xcode account → no change Clean build, deleted derived data → no change The problem: iOS 18.7 requires online verification for free Team certificates. The verification always fails with "需要互联网连接以验证是否信任开发者". The "VPN & Device Management" section on iPhone never shows the developer profile. Apple Support case: 102939216200 — they confirmed the certificate was created correctly under CK4269T4Q4, but referred me to technical support here. Has anyone encountered this? How can I force Xcode to use my paid Team for code signing?
3
0
545
2w
Notarization Issue – Team Not Configured
I came across your contact on the Apple Developer Forums. I'm encountering an unusual issue during the notarization process. The error message states: "Team is not yet configured for notarization. Please contact Developer Programs Support at developer.apple.com under the topic Development and Technical / Other Development or Technical Questions." Any guidance you could provide would be greatly appreciated. Here are the error details for reference: json { "logFormatVersion": 1, "jobId": "b6023a7c-dc85-4fa5-91dd-fba92c9ed831", "status": "Rejected", "statusSummary": "Team is not yet configured for notarization. Please contact Developer Programs Support at developer.apple.com under the topic Development and Technical / Other Development or Technical Questions.", "statusCode": 7000, "archiveFilename": "Bytemonk.dmg", "uploadDate": "2025-07-02T07:07:07.945Z", "sha256": "b9494170cc040a76045ed263de22e6b89a5455142af16ce502530e1c1ee72ddf", "ticketContents": null, "issues": null }
3
0
751
2w
Ad Hoc/Development install fails with 0xe8008018 on ALL devices — TestFlight works fine
Our iOS app fails to install via Ad Hoc or Development distribution with error: 0xe8008018 (The identity used to sign the executable is no longer valid). Environment: macOS 15.6.1, Xcode 16.0 Team ID: 8CJTVD465A Tested on iPhone 8 (iOS 16.7 + iOS 16.2) What works: TestFlight ✅, App Store ✅ What fails: Ad Hoc ❌, Development ❌ Key evidence: OCSP returns "good" for all certificates Brand new certificate (created today) → same error Install succeeds in Airplane mode but app shows "not available" at launch 4 different certificates, 3 profiles, 2 Xcode versions, 2 devices → all fail codesign --verify passes locally Full cert chain verified: Leaf → WWDR G3 → Apple Root CA This indicates Apple's online verification service is rejecting our team's signatures. Has anyone seen this or know how to resolve?
0
0
388
3w
Cannot upload files in background mode when running in release mode
I have a Flutter project that uploads files in background mode, implemented as a plugin for the iOS part. It works fine in debug mode when running from Xcode, but no files are uploaded in release mode (installed via .ipa). I implemented functions such as BGAppRefreshTask and BGProcessingTask, and configured BGTaskSchedulerErrorCodeNotPermitted properly in Info.plist. I registered background tasks (processing and fetch), and BGTaskScheduler also works well. The issue is that it works fine in debug mode but not in release mode. Do I need to modify some settings in the .entitlements file or configure something else? Environment: macOS: Sequoia 15.7.7 Xcode: 26.3 Flutter SDK: 3.19.5
2
0
336
3w
How to release a Bundle ID accidentally registered via Xcode automatic signing?
I'm trying to register the App ID ai.mycompany.app under our company Apple Developer account, but the portal says: "An App ID with Identifier 'ai.mycompany.app' is not available. Please enter a different string." We own the domain mycompany.ai, and no app is published with this identifier (an App Store lookup by bundle ID returns no results). I believe it was auto-registered earlier by Xcode's automatic signing under my personal Apple ID while testing a build, not under our company team. So it's now holding the identifier globally but isn't in use. I have access to both accounts — my free personal Apple ID and our paid company Developer account. The problem: under the free personal account, the Identifiers list (Certificates, IDs & Profiles) is restricted — free accounts can't access it on the portal, so I can't see or remove the Bundle ID there myself. And from the company account it doesn't appear, since it's owned by the personal team. What I want: release/remove this Bundle ID so I can register it under our company Developer account. Questions: If a Bundle ID was auto-created under a free personal team, how can it be removed when free accounts can't access the Identifiers list? Is contacting Developer Support the only way to release it in this case? Once released, does the identifier become available immediately, or is there a hold period before another team can register it? Any guidance appreciated.
2
1
982
Jun ’26
static framework and code signing
Hello. I am developing our company's SDK for iOS as a third-party library. This SDK consists of a static library and header files wrapped within a framework (and wrapping the target-specific frameworks in xcframework). I understand that codesign is required even for static frameworks, is it correct? Should I update the distributed files when the certificate expires? Does this depend on whether it is static or dynamic? When is the signature verified?
2
0
725
Jun ’26
Pass Type ID Certificate with NFC
Hello Team, We are currently implementing a digital membership solution across our gym facilities, allowing members to add their access cards to Apple Wallet. In this regard, we would like to request enablement of NFC capability for Wallet passes associated with our Apple Developer account. Our setup includes NFC-enabled access control hardware integrated with our gym management system, and NFC support is required to issue and utilize digital membership cards. At present, we only have a standard Pass Type ID Certificate in our developer account. However, we understand that NFC-enabled Wallet passes require a Pass Type ID Certificate with NFC capability. We would appreciate your guidance on how we can enable or obtain a Pass Type ID Certificate with NFC support in our Apple Developer account. Looking forward to your support.
1
0
591
Jun ’26
Patience had gone! Watting for nearly two months to get Family Controls Distribution entitlement, but still NO RESPONSE
Ive spent nearly one month to develop my first app, and now its done. but i am stuck with getting Family Controls Distribution entitlement. i`ve request that one month and half ago. but still get no response. I tried connect the apple developer support、send post on Forum、send code-level support on appstoreconnect. All completely disappeared into a black hole. I understand that you may be facing a significant backlog, waiting for nearly two months without any response or update regarding the Family Controls Distribution entitlement is extremely difficult for me to understand. I genuinely cannot understand why Apple’s review process is operating with such low efficiency.
0
0
931
May ’26
Family Controls entitlement stuck after app transfer
Hi Apple DTS, FivePrayer is a live App Store app and we are blocked by Family Controls (Distribution) after an app transfer. Bundle ID: com.fiveprayer.app Current team: FivePrayer LLC Previous team: Gansoft Inc. App Store: https://apps.apple.com/us/app/fiveprayer/id6755536905 This same app previously had Family Controls (Distribution) approved under Gansoft Inc. After the transfer to FivePrayer LLC, the capability did not carry over, so we had to request it again. It has now been pending for almost one month, and we cannot ship critical updates because Family Controls is a core dependency of the app. Is there a way to re-associate the previously approved entitlement with the transferred App ID, or route this to the correct Managed Capabilities / Entitlements team? Thank you.
1
2
880
May ’26
Team ID not matching my Newly registered Developer Account
I originally signed into Xcode using my iCloud email account. A few days later, I enrolled in the Apple Developer Program using the same account. However, I noticed that Apple generated a different Team ID for the developer account, which does not match the Team ID that was originally associated with my Xcode account. Now, whenever I sign in with that same account, I continue to get the original Team ID instead of the new one created with the developer account. Because of this mismatch, I’m unable to properly link my app and developer account. I would like assistance understanding why there are two different Team IDs for the same Apple account and how I can make Xcode use the correct developer Team ID. @Developer Technical Support
1
0
593
May ’26
Team ID not matching my Newly registered Developer Account
I originally signed into Xcode using my iCloud email account. A few days later, I enrolled in the Apple Developer Program using the same account. However, I noticed that Apple generated a different Team ID for the developer account, which does not match the Team ID that was originally associated with my Xcode account. Now, whenever I sign in with that same account, I continue to get the original Team ID instead of the new one created with the developer account. Because of this mismatch, I’m unable to properly link my app and developer account. I would like assistance understanding why there are two different Team IDs for the same Apple account and how I can make Xcode use the correct developer Team ID.
1
0
744
May ’26
Developer ID Application certificate creation
Hello, We are currently in the process of creating our Developer ID Application certificate which is due to expire. While creating the certificate, we were posed with the option of choosing a Developer ID Certificate Intermediary G2 Sub CA which is supported by Xcode 11.4.1 and later Previous Sub CA We currently build our application out of Xcode using Make or CMake files and perform the codesign and productsign using the codesign commands. We also use 2 different build machines, Ventura with Xcode 14.3 for our latest releases High Sierra (10.13) with Xcode 10.1 for legacy releases to support some customers. Can you please let us know which Developer ID Certificate Intermediary we should choose for generating the new Developer ID Application certificate?
1
0
937
May ’26
New Capabilities Request Tab in Certificates, Identifiers & Profiles
You can now easily request access to managed capabilities for your App IDs directly from the new Capability Requests tab in Certificates, Identifiers & Profiles > Identifiers. With this update, view available capabilities in one convenient location, check the status of your requested capabilities, and see any notes from Apple related to your requests. Learn more about capability requests.
Replies
0
Boosts
0
Views
2.8k
Activity
Jun ’25
UDID registration process
Some UDIDs are getting added immediately but some takes up to 72 hours and status is "iPhone Processing". Is there a way to get this processing expedited and why some devices gets added immediately.
Replies
2
Boosts
0
Views
488
Activity
22h
Updating App - Validation Hell - 90286, 91130
Updating an App for the first time since 2011. Build, Analyze, Archive all successful. Automatically Manage Signing checked. Validation fails with 90286 - Invalid code signing entitlements, and 91130 - Invalid Provisioning Profile dozens of times after tweaks, clean builds, trying manual signing (thought I was done with that), etc. For 90286 it seems my Developer ID , e.g. 346JXXXXX (not Team ID, QZ99XXXXX) is the prefix for the bundle ID, com.company.app-name and that generates the error? For 91130 it's invalid "com.apple.application-identifier" which I assume is the same issue with a Developer ID instead of a Team ID. The original version of the app was QZ99XXXXX.com.company.app-name. I even changed the bundle identifier in Xcode to that, and got this: App Record Creation failed due to request containing an attribute already in use. The app name you entered is already being used for another app in your account. If you would like to use the name for this app you will need to submit an update to your other app to change the name, or remove it from App Store Connect. Yes, the original app name is being used for an app in my account. I was trying to update the app, checked all the boxes, added update text, but of course there was no build to upload. Would appreciate any help.
Replies
20
Boosts
0
Views
3.1k
Activity
2w
Xcode always uses free Team (CKY689QC8W) instead of paid Team (CK4269T4Q4) for code signing
I have a paid Apple Developer account (Team CK4269T4Q4, renewed until 2027/7/10), but Xcode always generates development certificates under my free personal Team (CKY689QC8W) instead of the paid one. What I've tried: Deleted all certificates from Keychain → Xcode regenerates under CKY689QC8W Revoked all certificates on developer.apple.com → same result Manually created CSR + uploaded certificate → still CKY689QC8W Signed out/in of Xcode account → no change Clean build, deleted derived data → no change The problem: iOS 18.7 requires online verification for free Team certificates. The verification always fails with "需要互联网连接以验证是否信任开发者". The "VPN & Device Management" section on iPhone never shows the developer profile. Apple Support case: 102939216200 — they confirmed the certificate was created correctly under CK4269T4Q4, but referred me to technical support here. Has anyone encountered this? How can I force Xcode to use my paid Team for code signing?
Replies
3
Boosts
0
Views
545
Activity
2w
Notarization Issue – Team Not Configured
I came across your contact on the Apple Developer Forums. I'm encountering an unusual issue during the notarization process. The error message states: "Team is not yet configured for notarization. Please contact Developer Programs Support at developer.apple.com under the topic Development and Technical / Other Development or Technical Questions." Any guidance you could provide would be greatly appreciated. Here are the error details for reference: json { "logFormatVersion": 1, "jobId": "b6023a7c-dc85-4fa5-91dd-fba92c9ed831", "status": "Rejected", "statusSummary": "Team is not yet configured for notarization. Please contact Developer Programs Support at developer.apple.com under the topic Development and Technical / Other Development or Technical Questions.", "statusCode": 7000, "archiveFilename": "Bytemonk.dmg", "uploadDate": "2025-07-02T07:07:07.945Z", "sha256": "b9494170cc040a76045ed263de22e6b89a5455142af16ce502530e1c1ee72ddf", "ticketContents": null, "issues": null }
Replies
3
Boosts
0
Views
751
Activity
2w
Ad Hoc/Development install fails with 0xe8008018 on ALL devices — TestFlight works fine
Our iOS app fails to install via Ad Hoc or Development distribution with error: 0xe8008018 (The identity used to sign the executable is no longer valid). Environment: macOS 15.6.1, Xcode 16.0 Team ID: 8CJTVD465A Tested on iPhone 8 (iOS 16.7 + iOS 16.2) What works: TestFlight ✅, App Store ✅ What fails: Ad Hoc ❌, Development ❌ Key evidence: OCSP returns "good" for all certificates Brand new certificate (created today) → same error Install succeeds in Airplane mode but app shows "not available" at launch 4 different certificates, 3 profiles, 2 Xcode versions, 2 devices → all fail codesign --verify passes locally Full cert chain verified: Leaf → WWDR G3 → Apple Root CA This indicates Apple's online verification service is rejecting our team's signatures. Has anyone seen this or know how to resolve?
Replies
0
Boosts
0
Views
388
Activity
3w
Cannot upload files in background mode when running in release mode
I have a Flutter project that uploads files in background mode, implemented as a plugin for the iOS part. It works fine in debug mode when running from Xcode, but no files are uploaded in release mode (installed via .ipa). I implemented functions such as BGAppRefreshTask and BGProcessingTask, and configured BGTaskSchedulerErrorCodeNotPermitted properly in Info.plist. I registered background tasks (processing and fetch), and BGTaskScheduler also works well. The issue is that it works fine in debug mode but not in release mode. Do I need to modify some settings in the .entitlements file or configure something else? Environment: macOS: Sequoia 15.7.7 Xcode: 26.3 Flutter SDK: 3.19.5
Replies
2
Boosts
0
Views
336
Activity
3w
Pass Type ID Certificate not trusted
Am on Mac Tahoe, and have the WWDR G4 cert in my login keychain, however, all the certificates am generating are coming out as not trusted. what else should I do? I have tried all the troubleshooting tips to delete all WWDRs if it exists. Any helpful suggestions will be appreciated.
Replies
1
Boosts
0
Views
456
Activity
Jul ’26
How to release a Bundle ID accidentally registered via Xcode automatic signing?
I'm trying to register the App ID ai.mycompany.app under our company Apple Developer account, but the portal says: "An App ID with Identifier 'ai.mycompany.app' is not available. Please enter a different string." We own the domain mycompany.ai, and no app is published with this identifier (an App Store lookup by bundle ID returns no results). I believe it was auto-registered earlier by Xcode's automatic signing under my personal Apple ID while testing a build, not under our company team. So it's now holding the identifier globally but isn't in use. I have access to both accounts — my free personal Apple ID and our paid company Developer account. The problem: under the free personal account, the Identifiers list (Certificates, IDs & Profiles) is restricted — free accounts can't access it on the portal, so I can't see or remove the Bundle ID there myself. And from the company account it doesn't appear, since it's owned by the personal team. What I want: release/remove this Bundle ID so I can register it under our company Developer account. Questions: If a Bundle ID was auto-created under a free personal team, how can it be removed when free accounts can't access the Identifiers list? Is contacting Developer Support the only way to release it in this case? Once released, does the identifier become available immediately, or is there a hold period before another team can register it? Any guidance appreciated.
Replies
2
Boosts
1
Views
982
Activity
Jun ’26
static framework and code signing
Hello. I am developing our company's SDK for iOS as a third-party library. This SDK consists of a static library and header files wrapped within a framework (and wrapping the target-specific frameworks in xcframework). I understand that codesign is required even for static frameworks, is it correct? Should I update the distributed files when the certificate expires? Does this depend on whether it is static or dynamic? When is the signature verified?
Replies
2
Boosts
0
Views
725
Activity
Jun ’26
Unable to archive xcode project due to signing error
Hi, I'm trying to archive my xcode project. There is a build error. Warning: unable to build chain to self-signed root for signer "Apple Development: JOHN WILLIAM BAKER (VCZ7S72JNR)"
Replies
1
Boosts
0
Views
595
Activity
Jun ’26
Pass Type ID Certificate with NFC
Hello Team, We are currently implementing a digital membership solution across our gym facilities, allowing members to add their access cards to Apple Wallet. In this regard, we would like to request enablement of NFC capability for Wallet passes associated with our Apple Developer account. Our setup includes NFC-enabled access control hardware integrated with our gym management system, and NFC support is required to issue and utilize digital membership cards. At present, we only have a standard Pass Type ID Certificate in our developer account. However, we understand that NFC-enabled Wallet passes require a Pass Type ID Certificate with NFC capability. We would appreciate your guidance on how we can enable or obtain a Pass Type ID Certificate with NFC support in our Apple Developer account. Looking forward to your support.
Replies
1
Boosts
0
Views
591
Activity
Jun ’26
Which identifier should I use?
My app includes the main program, Finder extension, and launcher helper. Which identifier should I choose when generating a provisioning profile?
Replies
1
Boosts
0
Views
547
Activity
Jun ’26
Cleaning Unused Identifiers
Hi, I have Identifiers that's used maybe in old Xcode projects long time ago that never been uploaded for Apple to approve and yet when trying to remove I get an error message below, any suggested fixes ? " The App ID 'xyz.xyz.xyz' appears to be in use by the App Store, so it can not be removed at this time. "
Replies
1
Boosts
0
Views
604
Activity
Jun ’26
Identifiers - what do the icons mean?
On the Certificates, Identifiers and Profiles section of the Account section of developer.apple.com, if you manually configure the Capabilities of an App Identifier, there are icons with no tooltips. Does anyone know what they mean? (I'm particularly interested in the two different icons shown in my screenshot, with the same name)
Replies
1
Boosts
0
Views
767
Activity
Jun ’26
Patience had gone! Watting for nearly two months to get Family Controls Distribution entitlement, but still NO RESPONSE
Ive spent nearly one month to develop my first app, and now its done. but i am stuck with getting Family Controls Distribution entitlement. i`ve request that one month and half ago. but still get no response. I tried connect the apple developer support、send post on Forum、send code-level support on appstoreconnect. All completely disappeared into a black hole. I understand that you may be facing a significant backlog, waiting for nearly two months without any response or update regarding the Family Controls Distribution entitlement is extremely difficult for me to understand. I genuinely cannot understand why Apple’s review process is operating with such low efficiency.
Replies
0
Boosts
0
Views
931
Activity
May ’26
Family Controls entitlement stuck after app transfer
Hi Apple DTS, FivePrayer is a live App Store app and we are blocked by Family Controls (Distribution) after an app transfer. Bundle ID: com.fiveprayer.app Current team: FivePrayer LLC Previous team: Gansoft Inc. App Store: https://apps.apple.com/us/app/fiveprayer/id6755536905 This same app previously had Family Controls (Distribution) approved under Gansoft Inc. After the transfer to FivePrayer LLC, the capability did not carry over, so we had to request it again. It has now been pending for almost one month, and we cannot ship critical updates because Family Controls is a core dependency of the app. Is there a way to re-associate the previously approved entitlement with the transferred App ID, or route this to the correct Managed Capabilities / Entitlements team? Thank you.
Replies
1
Boosts
2
Views
880
Activity
May ’26
Team ID not matching my Newly registered Developer Account
I originally signed into Xcode using my iCloud email account. A few days later, I enrolled in the Apple Developer Program using the same account. However, I noticed that Apple generated a different Team ID for the developer account, which does not match the Team ID that was originally associated with my Xcode account. Now, whenever I sign in with that same account, I continue to get the original Team ID instead of the new one created with the developer account. Because of this mismatch, I’m unable to properly link my app and developer account. I would like assistance understanding why there are two different Team IDs for the same Apple account and how I can make Xcode use the correct developer Team ID. @Developer Technical Support
Replies
1
Boosts
0
Views
593
Activity
May ’26
Team ID not matching my Newly registered Developer Account
I originally signed into Xcode using my iCloud email account. A few days later, I enrolled in the Apple Developer Program using the same account. However, I noticed that Apple generated a different Team ID for the developer account, which does not match the Team ID that was originally associated with my Xcode account. Now, whenever I sign in with that same account, I continue to get the original Team ID instead of the new one created with the developer account. Because of this mismatch, I’m unable to properly link my app and developer account. I would like assistance understanding why there are two different Team IDs for the same Apple account and how I can make Xcode use the correct developer Team ID.
Replies
1
Boosts
0
Views
744
Activity
May ’26
Developer ID Application certificate creation
Hello, We are currently in the process of creating our Developer ID Application certificate which is due to expire. While creating the certificate, we were posed with the option of choosing a Developer ID Certificate Intermediary G2 Sub CA which is supported by Xcode 11.4.1 and later Previous Sub CA We currently build our application out of Xcode using Make or CMake files and perform the codesign and productsign using the codesign commands. We also use 2 different build machines, Ventura with Xcode 14.3 for our latest releases High Sierra (10.13) with Xcode 10.1 for legacy releases to support some customers. Can you please let us know which Developer ID Certificate Intermediary we should choose for generating the new Developer ID Application certificate?
Replies
1
Boosts
0
Views
937
Activity
May ’26