Xcode Cloud export fails with exit code 70: "Developer ID Application Managed" certificate exists but Xcode Cloud reports no cert/private key found

We're getting a build failure from Xcode Cloud on the Export Archive step for the Developer ID distribution destination. The App Store Connect and Development exports in the same build both succeed, only the Developer ID export fails.

Environment

  • Xcode 27.2 (27B48), macOS SDK 27.2
  • Build: Vor (macOS), Build 1270
  • Team ID: BB23FH7873

When Xcode Cloud queries for a certificate of type DEVELOPER_ID_APPLICATION_MANAGED zero results are returned:

Payload: {"urlEncodedQueryParams":"teamId=BB23FH7873&filter[certificateType]=DEVELOPER_ID_APPLICATION_MANAGED&limit=200"}
Response: { "data" : [ ], "meta" : { "paging" : { "total" : 0 ... } } }

It then attempts to create one, which is rejected:

POST .../certificates  {"certificateType":"DEVELOPER_ID_APPLICATION_MANAGED","teamId":"BB23FH7873"}

Response:
{
  "errors" : [ {
    "status" : "409",
    "code" : "ENTITY_ERROR",
    "resultCode" : 7460,
    "title" : "There is a problem with the request entity",
    "detail" : "You already have a current Developer ID Application Managed certificate or a pending certificate request."
  } ]
}

The export step then fails with:

error: exportArchive No signing certificate "Developer ID Application" found
  No "Developer ID Application" signing certificate matching team ID "BB23FH7873" with a private key was found.

error: exportArchive No profiles for 'app.getvor.macOS' were found
  Xcode couldn't find any Developer ID provisioning profiles matching 'app.getvor.macOS'.

** EXPORT FAILED **

xcodebuild -exportArchive then exits with status 70.

We have two Developer ID Application Managed (Xcode Cloud) certificates already in Certificates, Identifiers & Profiles, and no certs pending that we can see. So it looks like something is preventing Xcode Cloud from seeing its own previously created managed certificates.

Is there a way to get Xcode Cloud to recognize the existing certificates? Other posts suggest revoking existing Developer ID Application certificates, however our understanding is this has the potential to break currently signed and shipped versions of the application.

A version of this question was also submitted as case ID 103008361082.

I recently saw an Xcode Cloud thread that looks very like this one.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"