Hi all,
I've hit a wall trying to notarize a macOS installer pkg (built with Packages/Whitebox, signed with productsign). Every submission fails with:
"message": "The binary is not signed with a valid Developer ID certificate."
What's strange: this happens even on a minimal test pkg built with pkgbuild containing a single text file, signed only with productsign — no relation to my actual product. So it's not a content/nested-binary issue.
Local verification passes fine:
pkgutil --check-signature shows a full valid chain (Developer ID Installer → Developer ID Certification Authority → Apple Root CA) with a trusted timestamp.
Both my Developer ID Installer and Developer ID Application certificates were freshly created on Aug 19, 2026, show as valid/trusted in Keychain Access, and match on developer.apple.com (Team ID 6VCLSHAN7R).
What I've already tried:
Re-created both certificates from scratch
Waited 2 days in case of propagation delay
Checked for pending program agreements (none)
Checked developer.apple.com/system-status (Notary Service shows operational)
Verified no duplicate/conflicting certificates in keychain
Submitted a DTS support ticket 2 days ago, still waiting on a response. Has anyone run into this exact "valid everywhere except the notary service" situation? Any pointers appreciated.
Example submission ID: 91eee4f0-778a-4edb-9515-eabfc6711f3f
Topic:
Code Signing
SubTopic:
Notarization
0
0
14