Provisioning Profiles problem

System Sequoia (15.7.2); Xojo 2021.21; dektop apps only.

I tried many times to submit my app to the AppleStore with Provisional Profiles thru AppWrapper.

After Delivering them Transporter reported an error such as (Invalid Code Signing ‘org.myapp.pkg/Payload/myapp.app/Contents/Frameworks/Appearance{akCocoa.dyli/’ must be signed 2834xxxxxxx), or “Cannot be used with TestFlight because the signature for the bundle at “myapp.app” is missing an application identifier but has an application identifier in the provisioning profile for the bundle. Etc).

The first error shows up when I creating the distribution profile I select the first button in the certificates preview; the second error happens when I create the profile selecting the last button.

I drop the created profile into the profile-pane in AppWrapper, and carry on packaging the app.

Now, after downloading Apple Triage, I get this list of certificates:

And these are certificates in Keychain.app:

I guess I have to get rid of some of the Keychain certificates. Which one? Or are there any other suggestion? Tnks.

BTW: I know that the last Xojo releases can somehow do the job (plus Ttransporter), and I have it, but at present I’d like to confine myself to AppWrapper. The I may try the Xojo way.

At first glance, there are no duplicates in the certificates.

But I notice the Apple development one has a different code at the end.. perhaps that’s the issue?

What do you see if you use App Wrapper’s “Code Signing Diagnostic” menu item?

(Things are not helped by the way Apple names these things. It’s a hopelessly convoluted system)

Thanks for answering: here is what I see from “Code Signing Diagnostic”: it seems the Apple Development certificate is not even signed. Should I request the Authority and download it again?

macOS version 15.7.2 (build 24g325)
Xcode and required tools check
0 /Applications/Xcode.app 26.1.1 (17B100)
0 /usr/bin/codesign 75.0
0 /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/codesign_allocate 1030.6.3
0 /usr/bin/productbuild 860.140.3
0 /usr/sbin/spctl 620.140.3.700.1
0 /Applications/Xcode.app/Contents/Developer/usr/bin/stapler 36.0
0 /Applications/Xcode.app/Contents/Developer/usr/bin/altool 26.10.1
0 /Applications/Xcode.app/Contents/Developer/usr/bin/notarytool 39.0
0 /Applications/Xcode.app/Contents/Developer/usr/bin/iTMSTransporter 26.10.1
0 /Users/Shared/awhelper 373.2.2.6.4
Xcode licensed: YES

— Carlo Rubini (E6KX394B95)
!WA 2026-02-16 login-db !Missing “Private Key”, required for signing.; “Developer ID Application”
✓AD 2026-02-22 login-db “Apple Development: Carlo Rubini (H8954TDH5P)”
✓AI 2026-02-22 login-db “3rd Party Mac Developer Installer”
✓AA 2026-02-22 login-db “Apple Distribution”
✓AA 2026-02-22 login-db “3rd Party Mac Developer Application”
✓WA 2027-02-02 login-db “Developer ID Application”
✓WI 2027-02-02 login-db “Developer ID Installer”

— Intermediate authority certificates
✓ 2030-02-20 login-db “Apple Worldwide Developer Relations Certification Authority” 7CAF690A25B739FE7B9B447AC178C5EE
! 2023-02-08 login-db !Certificate Is Expired; “Apple Worldwide Developer Relations Certification Authority” 134752589830791184
✓ 2036-03-19 login-db “Apple Worldwide Developer Relations Certification Authority” 22C1A1470A747369EF538612C9C69F3D38F36CD7
✓ 2030-12-10 login-db “Apple Worldwide Developer Relations Certification Authority” 3B7E800AEED302A1E6ECDB97D9CAAC289CF16994
! 2023-02-08 System !Certificate Is Expired; “Apple Worldwide Developer Relations Certification Authority” 134752589830791184
✓ 2027-02-02 login-db “Developer ID Certification Authority” 1763908746353189132
✓ 2031-09-17 login-db “Developer ID Certification Authority” 7FB4003FCD97497ACB834D92A48A7873C2845D43

I noticed that the previous keychain list was missing some certificates listed in the above AppWrapper Diagnostic. So I hope this new listing is complete. It shows also the Private Key.

Although I do not see any expired “Apple Worldwide Developer Relations Certification Authority”

Meanwhile, after due request from Certified Authority, I downloaded 3rd Party Mac Developer Application (the first row in the list in the above post) and Apple Distribution (the forth one).

But both of them look the same as the old ones; i.e. the key is still Carlo Rubini, and the description of Apple Development is still H8954TDH5P).

It’s not. The distribution code is for the account. The developer code is for Carlo himself.

Carlo,

In APT there’s an option to add an Apple Team ID in the preferences window. You’ll need to set up API access in your account, but it allows it to see all of the pieces and give more insights into what might be wrong, including its own diagnostics.

1 Like

Following the Help-instructions in Settings I went to Users and Access, but I cant find “Additional Resources”. Sorry for being dumb…

Not at all. Apple moves this all the time. Gimme a sec.

1 Like

Ok. Apple moved them into a section called Integrations so it’s now:

  1. Users and Access
  2. Across to Integrations
  3. Select Team Keys
  4. + to add.

at this point you name the key and select a role. If it’s just you, go ahead and select Admin, but if you have someone working for you (or this isn’t your account) you should be able to select Developer or App Manager. Personally I use Admin because it lets me also create new certificates in APT.

Done. Since I am alone I registered as Admin and downloaded the key.

Later I’ll try to carry on with ATP. Meanwhile, thank you.

APT has been updated to version 3.9.2 with a new help file and a way for me to update that help file out-of-band so it can be done between releases.

@Greg_O Sadly, I get this immediately.. I have reverted back to 3.8 for now.

Interesting. Did you have any teams defined?

I do.

The same ID shows up listed twice, one with added ‘2025 API’

You probably don’t need both

Pretty sure I only added the one. The 2025 API phrase doesn’t feel like one I would use, but I might be mistaken.

I located the way to remove one in Settings.

Now I have only the default one. But while 3.8 works, 3.91 still crashes for me

After downloading APT 3.9.2, following the second part of Help (8 and 9) I opened the Preferences window and right-clicking in the list at the top of the screen added a new item putting the 3 strings into their proper fields; but after selecting the downloaded .p8 certificate I got a message saying that the Team ID is already in use (see attached screenshot), and asking if I wanted to replace it. At present I cancelled the operation as I thought it better to first ask you and do what you suggest. Meanwhile thanks for your kind assistance.

Yeah, that probably should have automatically replaced. A new version will be available soon that will let you remove that top entry and fix the TypeMismatchException from above.

Available now. Version 3.9.3.

1 Like

Updated to version 3.9.3 and added the new entry replacing the old one.

Do you see anything that may hint to my problem (provisioning profile non getting through)?