Hello,
New to Apple's system and structure for certs and signing. I've been working with their team to get access for developers on my team to access the correct Certs and sign what they need to so we can push our latest builds out, since this is needed by our CI/CD pipeline.
How can I give access to members of my team so they can do the code saying they need to and access the certs they need to?
the certs are for dmg and pkg installers on macos.
The best approach depends on your specific situation.
First up, if this is an Individual (rather than Organization) team, there’s a subtle gotcha. See Team Member Can’t access Certificates, Identifiers, and Profiles.
Second, you have to draw a distinction between day-to-day development signing identities and distribution signing identities. There are different rules for each. Specifically, for direct distribution using Developer ID signing, there are some serious gotchas. See The Care and Feeding of Developer ID.
So, with that in mind, my general advice is:
- Given each developer on your team their own development code-signing identity for day-to-day use. If you set your program roles correctly, they can create those themselves. See Developer Account Help > Access > Apple Developer Program Roles.
- For Apple Development or Developer ID distribution signing, manage the code-signing identity centrally on your CI/CD server.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"