Hi, I just did a backup of some keys and certificates in my local keyring. Then I removed expired certificates and keys without certificates. As reading about Certificate types, I think this certificate is missing: Mac App Distribution - Sign a Mac app before submitting it to the Mac App Store. https://developer.apple.com/help/account/certificates/certificates-overview/ This is the missing certificate I need, howto get it? I looked at the provisioning profile and it contains a new date, thats fine. Further I have checked my keyring and I think it is missing there, too.

What is with these 2 files? csr2048ALDEncrypt.certSigningRequest csr2048ALDSigning.certSigningRequest Do I need to run the certificate assistant with it? I just created these 2 files without any further actions.

You are right these are the 2 certificates used: Apple Distribution 3rd Party Mac Developer Installer

I have removed all duplicated certificates but I still get: Validation failed (409) Invalid Provisioning Profile. The provisioning profile included in the bundle com.gsequencer.GSequencer [com.gsequencer.GSequencer.pkg/Payload/com.gsequencer.GSequencer.app] is invalid. [Missing code-signing certificate.] For more information, visit the macOS Developer Portal. (ID: d7657aba-1015-4489-b046-5fa5251449d2)

Output from my shell script that produces the application and the package installer: /Applications/com.gsequencer.GSequencer.app/Contents/MacOS/com.gsequencer.GSequencer.AudioUnitTest: replacing existing signature /Applications/com.gsequencer.GSequencer.app/Contents/MacOS/com.gsequencer.GSequencer.AudioUnitTest: signed Mach-O universal (x86_64 arm64) [com.gsequencer.GSequencer.AudioUnitTest] /Applications/com.gsequencer.GSequencer.app/Contents/MacOS/com.gsequencer.GSequencer: replacing existing signature /Applications/com.gsequencer.GSequencer.app/Contents/MacOS/com.gsequencer.GSequencer: signed app bundle with Mach-O universal (x86_64 arm64) [com.gsequencer.GSequencer] /Applications/com.gsequencer.GSequencer.app: replacing existing signature /Applications/com.gsequencer.GSequencer.app: signed app bundle with Mach-O universal (x86_64 arm64) [com.gsequencer.GSequencer] productbuild: Adding component at /Applications/com.gsequencer.GSequencer.app productbuild: Signing product with identity "3rd Party Mac Developer Installer: Joel Kraehemann (****)" from keychain /Users/joelkraehemann/Library/Keychains/login.keychain-db productbuild: Adding certificate "Apple Worldwide Developer Relations Certification Authority" productbuild: Adding certificate "Apple Root CA" productbuild: Wrote product to /Users/joelkraehemann/Desktop/com.gsequencer.GSequencer.pkg productbuild: Supported OS versions: [Min: 11.0, Before: None] Output from Transporter: Validation failed (409) Invalid Provisioning Profile. The provisioning profile included in the bundle com.gsequencer.GSequencer [com.gsequencer.GSequencer.pkg/Payload/com.gsequencer.GSequencer.app] is invalid. [Missing code-signing certificate.] For more information, visit the macOS Developer Portal. (ID: d7657aba-1015-4489-b046-5fa5251449d2) I copied the provisioning profile from fresh built minimal Xcode project consisting only of main binary and helper program. This used to work. I back up my keys and import the missing certificate and key. Could it be that I have messed up apple developer? Under Generate a Provisioning Profile I see 5 certificates: **** (Mac App Distribution)Jan 13, 2027 **** (Distribution)For use in Xcode 11 or laterJan 13, 2027 **** (Distribution)For use in Xcode 11 or laterJan 13, 2027 **** (Mac App Distribution)Jan 13, 2027 **** (Distribution)For use in Xcode 11 or laterJan 16, 2027 Which do I need to configure? Maybe time to revoke?

One moment, I have a private key and what happens when I import another? Backup is recommended I think.

In Xcode there is a download dialog available if you disable automatic signing. It says no eligible profile available.

Transporter upload seems to work, after selecting the correct certificate on apple developer. Build again, new provisioning profile and it works.