"Invalid Provisioning Profile. The provisioning profile included in the bundle {BUNDLENAME} [{BUNDLENAME}.app] is invalid. [Missing code-signing certificate.]" for brand new, vanilla Mac App

In OS X Maverick's XCode, I created a brand new Mac > "Cocoa Application", with Core Data and Spotlight Importerl; about as vanilla a Cocoa application I could muster. 
Under Preferences > Accounts, I signed in to my Mac Developer Account.
In Targets > Identity, I set Signing to "Mac App Store", and was able to select my Mac Developer Account for "Team".
I then went to Product > Clean, and then Product > Build for... > Running, and then Produt > Archive.
In the Organizer, I select the resulting .app and click "Validate", and hit the Mac App Store radio, and hit "Next", and it's able to log into my Mac Developer Account.
I select my Provisioning Profile in the dropdown, and click "Validate".
It comes back with several errors:
1 - "Invalid Provisioning Profile. The provisioning profile included in the bundle {BUNDLENAME} [{BUNDLENAME}.app] is invalid. [Missing code-signing certificate.] For more information, visit the Mac OS Developer Portal."
2 - "The bundle identifier cannot be changed from the current value, '{DIFFERENT-BUNDLE-FROM-OTHER-PROJECT}'.  If you want to change your bundle identifier, you will need to create a new application in iTunes Connect.
3 - Invalid Code Signing Entitlements.  The entitlements in your app bundle signature do not match the ones that are contained in the provision profile.  The bundle contains a key that is not included in the provisioning profile: 'com.apple.applications-identifier' in '{BUNDLENAME}.app/Contents/MacOS/{BUNDLENAME}'
I was able to do the same process before, for a vanilla app, before Mavericks.  I'm not sure if this is a Mavericks error, or a fact that now I have multiple app projects.  Particularly odd is that DIFFERENT-BUNDLE-FROM-OTHER-PROJECT in error (2) is not the same bundle name as the current project's bundle.
Would love any help you can provide!  Thank you!

Seen this thread?
New codesign behavior, --deep option 
"Code signing has some interesting changes in Mavericks (that apparently haven't made it into the release notes yet...). Note that this is a change to the operating system, not to the devtools."

Similar Messages

  • Missing Code Signing Certificate in Profile Manager

    Hi everyone,
    Firstly, I'm not a professional and managing a server isn't in my skill set.  I have an old Mac mini running the Mavericks server to dabble with.
    Recently, the code-signing certificate (I assume self-signed) disappeared from Profile Manager for the option to "Sign configuration profiles" – no idea why, and I'm struggling to get it back, it just doesn't appear in the drop down.
    Under "Certificates" in Server.app, and within Keychain Access; it's still in the system and can be seen, where there are two of them.
    I've tried renewing both of these through Server.app to see if that would be a quick fix, but nothing.
    Could someone advise me on how to create a new verified code signing certificate for use with profile manager?
    Kind regards,
    Jamie

    Tried again.  Destroyed OD and recreated – code signing appears.  Reboot machine, code signing disappears.
    I tried exporting out the Code Signing Cert before rebooting the machine and reimporting after it disappears only to get "This profile cannot be used to sign profiles".
    Any idea what could be breaking the code-signing on reboot? Really bizarre.

  • Code Signing Certificate Renewal for Profile Manager

    Currently we have around 800 ipods/iphones around the globe that were all enrolled into our Profile Manager in the past year.  In one month our Code Signing Certificate will expire on ALL of those devices.  I have updated the certificate on our Profile Manager server and installed that into the Profile Manager.
    How do I update all of the devices in the field with the new certificate?  It is not possible for every one of those devices to be re-enrolled.  These are systems that we give to our customers to use for a specific purpose and they have no clue how to do anything with the MDM or the profile manager.  Apple - this wasn't well thought out...

    After loading the new certificates into the OS X Server box, the client devices will have to use the Profile Manager User Portal to load the updates.
    Here is the Apple documentation on updating the Profile Manager certificate (HT5358), though you may well have found that document already. 
    Unfortunately, the users have to navigate to the portal for that, or you'll have to manage a short-notice device swap.  (If it were even possible here, I'm not sure I'd want folks loading new certs via email, either...)
    If the existing Profile Manager solution doesn't meet your particular needs, then there are alternative MDM solutions around from other vendors, and that are also compatible with the OS X Server and iOS provisioning mechanisms.
    {FWIW, this is a user forum and the folks from Apple may or may not see your report.  If you have acccess to it, the Apple bugreport tool is a common way to log an enhancement request that the folks from Apple will see.}

  • Profile Manager Code Signing Certificate from GoDaddy .spc

    Convert the .spc to .cer for Profile Manager compatability.
    Thought I'd share how to convert a code signing certificate acquired from go daddy as it downloads as a .spc file that Profile manager will not accept.
    When you download your code signing certificate from go daddy it will be a .spc file as stated above, and profile manager needs a .cer file.
    Take your .zip file over to a Windows 7 or better PC and double-click the .zip file.
    Then double-click the enclosed certificate.
    This will open the windows certmgr.
    Expand the certificate and locate your certificate (Should be the one with your company name )
    Right-Click the desired certificate, select all tasks, then Export
    Export the certificate as a DER .cer file.
    Now copy the exported .cer certificate to your Server App/Certificates and import it into the Pending Certificate.
    Once that's done also add the .cer certificate to your keychain.
    Remember to replace the expiring certificate if applicable
    LJS

    After loading the new certificates into the OS X Server box, the client devices will have to use the Profile Manager User Portal to load the updates.
    Here is the Apple documentation on updating the Profile Manager certificate (HT5358), though you may well have found that document already. 
    Unfortunately, the users have to navigate to the portal for that, or you'll have to manage a short-notice device swap.  (If it were even possible here, I'm not sure I'd want folks loading new certs via email, either...)
    If the existing Profile Manager solution doesn't meet your particular needs, then there are alternative MDM solutions around from other vendors, and that are also compatible with the OS X Server and iOS provisioning mechanisms.
    {FWIW, this is a user forum and the folks from Apple may or may not see your report.  If you have acccess to it, the Apple bugreport tool is a common way to log an enhancement request that the folks from Apple will see.}

  • Configuration Profile Code-Signing Certificates

    Today, I learned that the Code-Signing Certificate used for signing Device Configuration Profiles is _different_ (and much more expensive) than the SSL Certificate used by other Lion Server services.
    I understand that these certificates follow a trust _chain_, and that Lion Server creates a default Code-Signing certificate based on the self-signed certificate it creates during setup. Since then, I've replaced my self-signed SSL Cert with a fully verified one.
    How can I use OpenSSL to create a Code-Signing certificate based on my purchased SSL Certificate, just like Lion Server did?

    You must obtain a code-signing cert from a trusted authority or it won't be trusted by any of your clients.
    ** Code-signing your profiles is kind of pointless if you're a small business or school. This is only useful if you're a large enterprise (or maybe a college or university) deploying profiles to many devices and are worried about tampering. A signed SSL cert more useful than a code-signing cert.
    ** (This is totally my opinion but that's how I see it. Code-signing certs allow your clients to determine that the code is in fact from you and it hasn't been altered in transit to the client. If this is really a concern for you then you would need to obtain a cert from a trusted authority, but I bet it's not...)

  • What kind of code signing certificate do I need for Profile Manager?

    I'm new to Lion Server and the Profile Manager, and I'm wondering what kind of CA-recognized code signing certificate I would need to buy to use in the Profile Manager -> Sign configuration profiles? For example, Verisign sells a bunch of different kind (http://www.verisign.com/code-signing/): Microsoft Authenticode, Java, etc.
    Patrick

    The cable should be just the normal one, the special smarts that tell the tablet to charge at full speed is in the power brick.

  • Profile Manager - no code signing certificate?

    I'm starting with a clean install of Lion Server. DNS is on an Xserve running Leopard Server.
    - CA signed certificates in place
    - DNS working fine
    - I create an OD Master (I've done this through Server.app, Server Admin and from hitting the "configure" button in Profile Manger, which triggers building an OD Master), and when the OD Master is built, an OD-based CA is created along with an OD-based intermediate certificate, but (and this is my problem), the OD-based code signing certificate is never produced, thus I don't have a code signing certificate to select when trying to enable "sign configuration profiles"?
    This is driving me insane. Anyone know why the code signing certificate isn't being generated?
    Thanks,
    Kristin.

    I'm starting with a clean install of Lion Server. DNS is on an Xserve running Leopard Server.
    - CA signed certificates in place
    - DNS working fine
    - I create an OD Master (I've done this through Server.app, Server Admin and from hitting the "configure" button in Profile Manger, which triggers building an OD Master), and when the OD Master is built, an OD-based CA is created along with an OD-based intermediate certificate, but (and this is my problem), the OD-based code signing certificate is never produced, thus I don't have a code signing certificate to select when trying to enable "sign configuration profiles"?
    This is driving me insane. Anyone know why the code signing certificate isn't being generated?
    Thanks,
    Kristin.

  • How can I get the digital booklet included with the albums I am purchasing from iTunes directly on my iPad?

    How can I get the digital booklet included with the albums I am purchasing from iTunes directly on my iPad?  My MacBook died about 6 months ago, so now I just have an iPhone and iPad.  I would like to be able to see the Digital Booklet in my iPad when I download the album.  I do not have any other computer to download the booklet to and sync to my iPad.

    Apparently, you have to download the booklet to iTunes on a computer first, fiddle with the file type, then sync it as a book to your iPad. See http://support.apple.com/kb/HT4194 for details.

  • Where can I find a list of the 1600 /- instruments included in the new Logic Pro X?

    Greetings,
    Where can I find a list of the 1600+/- instruments included in the new Logic Pro X?
    Thanks all!

    AFAIK, there is no master list. If you have the Silicon Prairie "Tools" utilities, you can compile your own lists. See: Silicon Prairie - FrameMaker Products
    The best approach is to simply use the Copy Special to pick up the paragraph and character styles that you want to add to your new template and build the template piecemeal, i.e. create one FM file for your tables, another for your page layouts/sizes, another for your tags, cross-refs, etc. Then combine those as required to build the final template. This Lego-like approach is much more flexible and allows you to modify base-components and quickly make a new brand new template.

  • How can i make it so every time i save something the date is included in the title?

    how can i make it so every time i save something the date is included in the title?

    More information would be helpful. Are you doing this in an application? If so, what application.

  • The name ("common name") of a valid code-signing certificate in a keychain within your keychain path.   A missing or invalid certificate will cause a build error.  [CODE_SIGN_IDENTITY]

    The name ("common name") of a valid code-signing certificate in a keychain within your keychain path.   A missing or invalid certificate will cause a build error.  [CODE_SIGN_IDENTITY]

    If you could ask a coherent question, maybe...
    Perhaps you should be posting in the developers forums...

  • My iphone 4 will not play or open the music application included on the iphone

    when i try to open the music application included on my phone it comes up as a blank or black screen for a few seconds before returning to the home screen i have rebooted and restarted as well as fully closed down all my apps

    Try resetting it: hold down the power and the Home button for about ten seconds until the Apple icon appears on the screen.
    As per the troubleshooting section of the User Guide:  http://manuals.info.apple.com/en_US/iPhone_iOS4_User_Guide.pdf

  • I tried to sign up for a new free account, got message from you. Sent you em address ask what is wrong. Find my em was right. condused. Tried change my profile, but never had a profile, and at that it says to change my password, not want to change it.

    Wow, at age 76 I'm suppose to remember all I saw before and give you more details?
    I wanted to be able to join the support blog, to be able to ask a question. It all went from there. Somewhere along the line I saw sign up for a new free (support?) account. I did. created a cute name (Marycontrary), put in a password, not likely one to be used by someone else, my em address. Sent. Got a confirmation em from you. I clidked to confirm. I got back from you: It said something wrong (or something like that) I thought maybe I didn't type in the last part of my em address and sent a reply to you to that effect. See above for rest. Hope you can help. I can't stand it when companies want us to change our passwords. I like us to be able to keep our original password, I use different ones for different sites. The best sites give us a chance to retrieve our orignial password by setting up a chance to choosing a question of our choice and registering the answer, then when a problem they as the question and we give the answer and everything goes well. These change you password bits are very very hard on us older people, and there are more and more of us out here on the net now days. Thank you for any help you can give me.'''bold text'''

    You are describing the way Skype accounts are set up since the beginning of Skype: No email verification is necessary. That's why we recommend new users to create their Skype accouns using Microsoft account instead which has all these security features.
    Follow the latest Skype Community News
    ↓ Did my reply answer your question? Accept it as a solution to help others, Thanks. ↓

  • In order to take advantage of the iPhone trade in, do I need to have met my upgrade eldigbility date, or do I just need to re-sign up for a new 2 year plan with the new iPhone 6?

    In order to take advantage of the iPhone trade in, do I need to have met my upgrade eldigbility date, or do I just need to re-sign up for a new 2 year plan with the new iPhone 6?

    thanks, a HUGE suggestion for you:  Please add that to the restrictions of the trade-in details online, it mentions that nowhere and is VERY deceptive.  Since at least 90% of 5c and 5s users are under a 2 year contract and both phones have been out just a year, there will be a majority of bitter customers who fell for the ad and will be taking advantage of the buy out options the other carriers are offering.

  • I have a macmini on order, I wonder if I can pair the wireless apple keyboard and magic touchpad without using any other input devices, especially, since everything is brand new and not yet paired.

    I have a macmini on order, I wonder if I can pair the wireless apple keyboard and magic touchpad without using any other input devices, especially, since everything is brand new and not yet paired.

    You may just want to save yourself any possible issues
    by just hooking up a wired keyboard and mouse on first
    start up.  Any USB keyboard and mouse should work.
    There have been many that have had problems on first boot
    using the Bluetooth devices. 

Maybe you are looking for

  • Project Structure in SAP R/3 Replication Issues

    Hi All, I have some of the Issues while creating the Project Structure in cProjects. 1) The Project Structure getting generated in SAP R/3 is only mappped with WBS elements, why not Networks and Network Activies. e.g *cProjects                     SA

  • I update to os x 10.9.3 and now my dvd player app says it's not supported

    I updated to os x 10.9.3 mavericks and now my dvd player app says it can't be used with os x 10.9.3(and the dvd player is 5.4,and can't find update in app store) What to do?

  • Cannot invoke WebService from Excel

    I've created simple web service based on java class using Jdeveloper's 9.0.5.2 wizard. Java class looks like this package test; public class HelloNameClass public HelloNameClass() public String sayHello(String name) return "Hello "+name; I've generat

  • How to compare 2 Objects( and )?

    Should I write an interface?

  • Ubuntu 7.10 freeze when create a new virtual machine

    Hi We try to create a virtual machine using Ubuntu 7.10, but when boot it freeze when begin the ISO Loading. Log: Plex86/Bochs VGABios current-cvs 13 Nov 2007 This VGA/VBE BIOS is released under the GNU LGPL cirrus-compatible VGA is detected HVMAssis