General:
Forums topic: Code Signing
Forums subtopic: Code Signing > Notarization
Forums tag: Notarization
WWDC 2018 Session 702 Your Apps and the Future of macOS Security
WWDC 2019 Session 703 All About Notarization
WWDC 2021 Session 10261 Faster and simpler notarization for Mac apps
WWDC 2022 Session 10109 What’s new in notarization for Mac apps — Amongst other things, this introduced the Notary REST API
Notarizing macOS Software Before Distribution documentation
Customizing the Notarization Workflow documentation
Resolving Common Notarization Issues documentation
Notary REST API documentation
TN3147 Migrating to the latest notarization tool technote
Fetching the Notary Log forums post
Q&A with the Mac notary service team Developer > News post
Apple notary service update Developer > News post
Notarisation and the macOS 10.9 SDK forums post
Testing a Notarised Product forums post
Notarisation Fundamentals forums post
The Pros and Cons of Stapling forums post
Resolving Error 65 When Stapling forums post
Many notarisation issues are actually code signing or trusted execution issue. For more on those topics, see Code Signing Resources and Trusted Execution Resources.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"
Notarization
RSS for tagNotarization is the process of scanning Developer ID-signed software for malicious components before distribution outside of the Mac App Store.
Selecting any option will automatically load the page
Post
Replies
Boosts
Views
Activity
Yestoday, I got problem
createdDate: 2026-03-17T09:06:38.486Z
id: d1c679af-5f41-437b-9ca1-4c96047a58fb
name: easyclaw.app.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-03-17T03:30:38.278Z
id: fe1bb550-7f42-41c8-8d38-40ac7f9e7c91
name: easyclaw.app.zip
status: Accepted
And retry today monring,waiting again:
Successfully received submission history.
history
--------------------------------------------------
createdDate: 2026-03-18T02:17:44.322Z
id: 141b0dcb-d0fe-464e-9167-3a15e59aec87
name: easyclaw.app.zip
status: In Progress
Topic:
Code Signing
SubTopic:
Notarization
I have been code signing my py2app Python applications for over 5 years. Recently, my application notarizes and staples with no errors. However, when I try to verify the signature I get the above error. I do not see any errors in the appropriate notary log file. Can't figure out how to post the log file. The associated ID is: eb78c6b0-cdd2-414f-9dd3-24315a27d457
Can anyone point me to an appropriate reference ?
Topic:
Code Signing
SubTopic:
Notarization
I’m looking for guidance from anyone who has experienced a similar situation.
I’m a new Apple Developer Program organization member, and this was my first attempt to notarize a macOS app distributed outside the Mac App Store.
What happened:
My notarization submissions started failing with statusCode 7000 and the message: “Team is not yet configured for notarization.”. I created a support ticket and received the following reply: “We have escalated this issue to our internal team for further investigation and review.” This was more than 2 months ago, and I have not received any further updates since.
About 3 weeks later macOS began rejecting my signed app:
codesign --verify --deep --strict --verbose=4
succeeds (reports valid signing identity)
spctl -a -vv --type exec
returns CSSMERR_TP_CERT_REVOKED
Around the same time, I also lost access to the Apple Developer portal. When signing in at developer.apple.com/account, I am redirected to the account access support form instead of the dashboard.
My app has not been released to users. If there is an issue with my build, signing, entitlements, or packaging, I am fully willing to fix it immediately.
What I cannot understand is the lack of any substantive response from Apple Developer Program Support for over 2 months.
What I’m trying to understand:
Has anyone encountered this combination of issues:
statusCode 7000,
Developer ID trust/revocation problems,
Blocked developer portal access?
Is there any documented appeal, review, or remediation process?
If Apple believes a team has violated a policy, how is the developer supposed to find out what needs to be fixed?
I’m not asking Apple to bypass security checks. I’m asking for a clear explanation and a path to resolve any issue, if one exists.
Any help would be greatly appreciated. Thank you.
Topic:
Code Signing
SubTopic:
Notarization
Tags:
Signing Certificates
Developer ID
Developer Program
From what I can tell, it seems that this is something standard that we have to deal with; however, what is annoying and frustrating is I paid good money to have this service work. My application is for important internal use at our company, and this is causing major issues and starting to make me look pretty bad, frankly. On top of that, there is no feedback at all, no reason given.
Notarizing darwin binaries...
Conducting pre-submission checks for aria.zip and initiating connection to the Apple notary service...
Submission ID received
id: ec041209-5652-4772-8689-e9e654432da8
Successfully uploaded file
id: ec041209-5652-4772-8689-e9e654432da8
path: /Users/shaneholloman/git/sources/uicnz/aria/dist/darwin-arm64/aria.zip
Waiting for processing to complete.
Hello, I am following up on several notarization requests in order to understand the process better.
I submitted my first notary request yesterday and it took several hours to complete (where I submitted two other requests along the way thinking they may be stuck). They were all accepted after ~3 hours had passed since the first request was made. In that time I discovered a bug and had to rebuild/codesign, and submitted to notarize again. I've now had two requests with the new build (.zip file) "in progress" for ~18 hours. The bug fix I made between builds was innocuous and I'm wondering if my jobs are getting flagged due to recent account lockouts when I was first setting up my organizations' developer account.
I've seen several replies here in the forum from DTS Engineers - hi Quinn :), so I'm aware of the possibility of 'rare' in-depth analysis, however I've experienced it in 100% of my requests.
What is causing my requests to always require in-depth analysis and is there anything I can do to prevent it?
My notarytool history is below for reference.
Thank you in advance.
createdDate: 2026-03-15T22:59:23.053Z
id: 9c7ecc81-daf4-4cae-afe9-7f8186067f79
status: In Progress
--------------------------------------------------
createdDate: 2026-03-15T21:10:04.576Z
id: a1df8b50-c897-49f5-ad0d-f2264a03f145
status: In Progress
--------------------------------------------------
createdDate: 2026-03-15T20:41:24.946Z
id: 640e7cd6-035f-437b-9eab-9a3db415911a
status: Accepted
--------------------------------------------------
createdDate: 2026-03-15T18:40:26.944Z
id: 00b9e907-04eb-4561-8353-dae7520202e0
status: Accepted
--------------------------------------------------
createdDate: 2026-03-15T17:16:48.426Z
id: 3163ba2b-e3c8-4216-ae8a-bac351b82f8a
status: Accepted
All of my notarization submissions have been stuck at "In Progress" for up to 10 days. I have 6 submissions spanning from March 4 to March 11, 2026, and none of them have completed or returned any errors.
Affected submissions:
dbf20b57-0073-444a-b09a-ac6747b7398e (submitted Mar 4) — In Progress
d5886683-be64-455c-805d-cd8b12bbcd35 (submitted Mar 4) — In Progress
10bfa709-da17-49cf-9c89-63f93b5fb756 (submitted Mar 4) — In Progress
e8d0866e-43f8-4a18-8129-64e6c5d3895a (submitted Mar 9) — In Progress
f9526f25-5650-4c45-98ae-d778c58a2ffa (submitted Mar 9) — In Progress
82ec211f-9179-41fd-afe0-937c9b2c2750 (submitted Mar 11) — In Progress
Running `notarytool log` returns "Submission log is not yet available."
Team ID: CB4U5M6U9H
It is an Electron-based app built with electron-builder.
Steps taken to ensure compliance:
Signed with a valid Developer ID Application certificate
Hardened runtime enabled (hardenedRuntime: true)
Proper entitlements configured (com.apple.security.cs.allow-jit, com.apple.security.cs.allow-unsigned-executable-memory, com.apple.security.cs.disable-library-validation)
Entitlements inherited for child processes via entitlements.mac.inherit.plist
Electron Fuses configured to disable Node.js CLI flags in production (resetAdHocDarwinSignature enabled)
App submitted as a zip archive via notarytool submit
I've tried resubmitting multiple times across different builds, but all submissions remain stuck. I also have an open support case (102836201208) that was escalated to Senior Advisors on March 11, but have not received any update.
Could someone from the notarization team please investigate?
Hi,
I have uploaded the package to notarize using the xcrun command. Verbose logs shows that the upload is success and it shows the submission id as well. After that it is in loop to get the status of the upload.
Following is the command I have used.
Some part of the command verbose log
Multiline
[08:46:48.984Z] Info [UPLOAD] Starting S3 multipart upload of file at 'file:///var/folders/ty/lkzb6dxj0hq_b0wplk5lz6jw0000gp/T/TemporaryItems/NSIRD_notarytool_AtDtEn/Fiery%20Remote%20Scan.dmg' with part size 5 MB to Bucket: notary-submissions-prod, Key: prod/AROARQF6ZA5L:dc619a13-da5b-42fe-9b2b-afcadf078bc0
[08:46:48.984Z] Debug [UPLOAD] Received new upload status: Uploading
[08:46:56.648Z] Debug [UPLOAD] Received new upload status: Succeeded
[08:46:56.649Z] Debug [UPLOAD] multipart upload etag: "364e1cccccc99b5d98f7cccccccccc18d58f-6"
[08:46:56.650Z] Info [UPLOAD] Multipart upload process has completed successfully.
[08:46:56.651Z] Info [UPLOAD] Attempting to shutdown local S3 upload service.
[08:46:56.651Z] Info [UPLOAD] Successfully shutdown local S3 upload service.
[08:46:56.652Z] Info [API] Beginning to wait for submission id: dc619a13-cccccccadf078bc0
[08:46:56.652Z] Info [API] Preparing GET request to URL: https://appstoreconnect.apple.com/notary/v2/submissions/dc619a13-xxxx-afcadf078bc0?, Parameters: [:], Custom Headers: private<Dictionary<String, String>>
[08:46:56.652Z] Debug [JWT] Using cached JWT value for key ID: F73xxxxx
[08:46:56.653Z] Debug [AUTHENTICATION] Authenticating request with App Store Connect API credentials. Key ID: F737N55KF2, Issuer ID: e3b80xxxxxx-9ab9-db8ee8ece781
[08:46:56.653Z] Debug [TASKMANAGER] Starting Task Manager loop to wait for asynchronous HTTP calls.
[08:46:57.130Z] Debug [API] Received response status code: 200, message: no error, URL: https://appstoreconnect.apple.com/notary/v2/submissions/dc619a13-da5b-42xxxxxx-afcadf078bc0?, Correlation Key: NUGVFYUAWxxxxxxxHQJ3VRLQ
[08:46:57.130Z] Debug [TASKMANAGER] Completed Task with ID 2 has received a parsable response.
[08:46:57.130Z] Debug [TASKMANAGER] Ending Task Manager loop.
[08:46:57.130Z] Info [API] Initial status: In Progress)
[08:46:57.131Z] Info [API] Waiting 5 seconds before next poll...
[08:47:02.136Z] Info [API] Preparing GET request to URL: https://appstoreconnect.apple.com/notary/v2/submissions/dc619a13-da5b-xxxxxx078bc0?, Parameters: [:], Custom Headers: private<Dictionary<String, String>>
[08:47:02.137Z] Debug [JWT] Using cached JWT value for key ID: F737N55KF2
[08:47:02.138Z] Debug [AUTHENTICATION] Authenticating request with App Store Connect API credentials. Key ID: F737N55KF2, Issuer ID: e3b8057xxxxxx597-9ab9-db8ee8ece781
[08:47:02.138Z] Debug [TASKMANAGER] Starting Task Manager loop to wait for asynchronous HTTP calls.
[08:47:02.586Z] Debug [API] Received response status code: 200, message: no error, URL: https://appstoreconnect.apple.com/notary/v2/submissions/dc619a13-da5xxxxxxxdf078bc0?, Correlation Key: YD4I377GRGJxxxxx6M3PAJOA
[08:47:02.586Z] Debug [TASKMANAGER] Completed Task with ID 3 has received a parsable response.
[08:47:02.586Z] Debug [TASKMANAGER] Ending Task Manager loop.
[08:47:02.587Z] Info [API] Received new status: In Progress
[08:47:02.587Z] Info [API] Waiting 5 seconds before next poll...
BlockQuote
This is going on a loop
If I try to get the the status of the submission, it shows as "In Progress"
xcrun notarytool info dc619a-9b2b-afcadf078bc0 --key AuthKey_F73cccc.p8 --key-id ccccc --issuer ccccc-d19d-4597-9ab9-cccccc
Successfully received submission info
createdDate: 2026-03-12T08:46:48.761Z
id: dc619a13-dccccccadf078bc0
name: xxxxxx.dmg
status: In Progress
code-block
Could you please help us on this?
OS:
macOS 26.3
Xcode: 26.2
Regards
Prema Kumar
I'm unable to notarize my macOS app — notarytool returns statusCode 7000 ("Team is not yet configured for notarization"). My Developer ID
certificate is valid (expires 2031), code signing works fine.
Timeline:
March 4 — opened case 102832266798 via Developer Programs Support
March 6 — Apple replied, but the email never arrived (not in spam either)
March 9 — sent follow-up requesting the response be resent — no reply
March 13 — opened new case 102840272497 via Program Enrollment form — waiting
It's been 9 days with no resolution. DTS confirmed this is not a technical issue and referred me to Developer Programs Support.
Team ID: 9NL8W3646T
Bundle ID: com.traart.app
How can I escalate this? Has anyone experienced a similar situation with a new account?
All of my notarization submissions have been stuck at "In Progress" for over a week. I have 6 submissions spanning from March 4 to March 10, 2026, and none of them have completed or returned any errors.
Affected submissions:
685708f6 — MeetingRecorder-1.5.0.dmg (submitted Mar 10) — In Progress
6ade1490 — MeetingRecorder-1.5.0.dmg (submitted Mar 10) — In Progress
99d39bd0 — MeetingRecorder-1.4.12.dmg (submitted Mar 6) — In Progress
e65f95e1 — MeetingRecorder-1.4.9.dmg (submitted Mar 6) — In Progress
eb51b220 — MeetingRecorder-1.4.9.dmg (submitted Mar 5) — In Progress
9cc33cfd — MeetingRecorder-1.4.9.dmg (submitted Mar 4) — In Progress
Running notarytool log returns "Submission log is not yet available."
Team ID: HXVLV4P425
The app is a macOS menu bar application for meeting recording and transcription. It is signed with a valid Developer ID certificate and has been built with hardened runtime enabled.
I've tried resubmitting multiple times across different builds (1.4.9, 1.4.12, 1.5.0), but all submissions remain stuck. Could someone from the notarization team please investigate?
Thank you.
Topic:
Code Signing
SubTopic:
Notarization
Hello,
We are experiencing repeated notarization delays for our macOS app distributed outside the Mac App Store.
Current submission ID:
45d7cac0-bd8a-4d48-b886-1cad7649adf4
Previous affected submission ID:
ff61de1e-15f5-4bbe-8b34-a91a6f73b978
Issue description:
xcrun notarytool submit succeeds and returns a submission ID.
xcrun notarytool info keeps returning In Progress for a very long time.
In the current case, the submission has remained In Progress for more than 45 minutes.
This issue has happened repeatedly across multiple submissions.
What we have already checked:
We are not using a local proxy for notarization requests.
We separated submit and polling in our build script to verify the exact stage.
We retried multiple times.
We reduced package contents to rule out newly introduced app content.
Could someone from Apple please help check whether these submission IDs are stuck in the notarization pipeline, or advise what additional diagnostics we should provide?
Thank you.
Topic:
Code Signing
SubTopic:
Notarization
Notarization submissions stuck “In Progress” for 5+ days (SwiftUI macOS menu bar app)
Hello,
I’m experiencing an issue where all notarization submissions remain “In Progress” for several days.
Environment
macOS native app written in Swift / SwiftUI
Menu bar application
Built with Xcode
Developer ID Application signing
Hardened Runtime enabled
App Sandbox disabled
Uses SMAppService for “Start at Login”
Artifact structure
ClaudeUsageTracker.zip
└ ClaudeUsageTracker.app
(no nested directory)
Verification
codesign --verify --deep --strict --verbose=2 ClaudeUsageTracker.app
This succeeds without errors.
Notarization submissions
2026-03-06 — In Progress
ID=215814fc-57c5-4f99-88fe-ed2db4d3e3d9
2026-03-06 — In Progress
ID=70948178-191c-4840-a9c7-52c321b725e5
2026-03-09 — In Progress
ID=14a88b79-df4d-4d83-9bfe-fa6eafc9bf76
All submissions remain In Progress for 5+ days, and notarytool log is not available yet.
Command used
xcrun notarytool submit ClaudeUsageTracker.zip \
--keychain-profile "notarytool-profile"
The app is a small utility and the archive is only a few MB.
Is there a known issue with the notarization queue or with accounts getting stuck in a processing state?
Any guidance would be appreciated.
Thanks.
Repository: https://github.com/grad13/Claude-Usage-Tracker
We are experiencing notarization submissions that remain in the “In Progress” state for an extended period (over 24 hours), with no status transition and no submission log available.
This is occurring in an automated CI environment using the Notary REST API (non-interactive submission and polling). Re-submitting the same package only results in additional submissions also stuck in “In Progress”.
There does not appear to be any API mechanism to cancel, clear, or expire these submissions once they are created.
We have already opened an Apple Developer Support case regarding this issue (Case ID: 102818066745 & 102819008943), but have not yet received clarification on what is causing these long-running “In Progress” states.
This issue is impacting our production release pipeline, as we are unable to reliably complete notarization for signed packages within an expected timeframe.
Based on other reports in this forum (including thread 811968), this behavior appears similar to cases where notarization requests were delayed due to backend backlog or in-depth analysis.
We would appreciate clarification on the following:
Is it expected behavior for notarization submissions to remain in “In Progress” for such a long period without logs?
Is client-side timeout and re-submission the recommended handling for CI workflows?
Are there known service-side conditions (e.g. analysis backlog) that could explain this behavior?
Any guidance from Apple DTS or others who have encountered this would be greatly appreciated.
Topic:
Code Signing
SubTopic:
Notarization
Hi,
I currently have multiple notarization submissions that have been stuck in "In Progress" status for many hours without any updates.
Here are several examples from my recent submissions:
Submission IDs:
01f7a80e-a9cc-49b3-bb93-94b126cf3124 (a.dmg)
7af2b25f-e131-40a4-bcd3-0f7583ebbdc2 (a.dmg)
2b35ec79-d851-41d6-a900-788d4201a273 (b.dmg)
8194b1af-a270-4de9-92f1-ce2a8d4782f2 (c.dmg)
2608dcfc-7652-4efa-97e3-1749e7130dcb (d.zip)
These submissions were created between March 11 and March 12, and all of them remain stuck in the "In Progress" state indefinitely.
When checking using:
xcrun notarytool history
all recent submissions appear as:
status: In Progress
Additionally:
No logs are available for these submissions.
notarytool --wait eventually times out after 30 minutes with exit code 124.
The app bundles are signed with a valid Developer ID Application certificate.
All embedded frameworks and dylibs are individually signed using:
--options runtime
--timestamp
Earlier submissions on the same day (for example df41010c-a3c6-4e2d-a455-b657693e8541) were successfully notarized and returned Accepted, so the signing configuration appears to be correct.
Because many submissions across different files (DMG and ZIP) are stuck in the same state, it seems possible that the notarization service queue may be stalled.
Could you please help confirm:
Whether these notarization submissions are stuck on the Apple notarization service side
If there is currently a service issue affecting notarization processing
Whether I should cancel and resubmit these uploads
Any guidance would be greatly appreciated.
Thank you.
Hi,
I currently have multiple notarization submissions that have been stuck in "In Progress" status for many hours without any updates.
Here are several examples from my recent submissions:
Submission IDs:
01f7a80e-a9cc-49b3-bb93-94b126cf3124 (AutoTyper.dmg)
7af2b25f-e131-40a4-bcd3-0f7583ebbdc2 (AutoTyper.dmg)
2b35ec79-d851-41d6-a900-788d4201a273 (autoclaw-0.2.15.dmg)
8194b1af-a270-4de9-92f1-ce2a8d4782f2 (z-code_0.21.2_aarch64.unnotarized.dmg)
2608dcfc-7652-4efa-97e3-1749e7130dcb (AutoGLM PC.zip)
These submissions were created between March 11 and March 12, and all of them remain stuck in the "In Progress" state indefinitely.
When checking using:
xcrun notarytool history
all recent submissions appear as:
status: In Progress
Additionally:
No logs are available for these submissions.
notarytool --wait eventually times out after 30 minutes with exit code 124.
The app bundles are signed with a valid Developer ID Application certificate.
All embedded frameworks and dylibs are individually signed using:
--options runtime
--timestamp
Earlier submissions on the same day (for example df41010c-a3c6-4e2d-a455-b657693e8541) were successfully notarized and returned Accepted, so the signing configuration appears to be correct.
Because many submissions across different files (DMG and ZIP) are stuck in the same state, it seems possible that the notarization service queue may be stalled.
Could you please help confirm:
Whether these notarization submissions are stuck on the Apple notarization service side
If there is currently a service issue affecting notarization processing
Whether I should cancel and resubmit these uploads
Any guidance would be greatly appreciated.
Thank you.
Hi,
I'm a new Developer ID account holder submitting my first app for notarization. All submissions have been stuck "In Progress" for 72+ hours. Apple System Status has shown all services operational throughout.
Team ID: 4L9YA7S99L
$ xcrun notarytool history --keychain-profile "blackbox"
Successfully received submission history.
history
--------------------------------------------------
createdDate: 2026-03-09T11:19:41.697Z
id: 2c0cdf3d-a3ac-4d86-8eb0-2f601b2d09c5
name: Blackbox-0.2.0.dmg
status: In Progress
--------------------------------------------------
createdDate: 2026-03-07T18:11:37.660Z
id: 5ab09d84-b2e2-4738-9b63-100a7dd46882
name: Blackbox-0.1.0.dmg
status: In Progress
--------------------------------------------------
createdDate: 2026-03-06T22:47:21.410Z
id: 1c90fa3e-c52a-4468-8056-06ff5d7d3752
name: Blackbox-0.1.0.dmg
status: In Progress
--------------------------------------------------
createdDate: 2026-03-06T22:34:55.803Z
id: 4bbd6f77-7ff6-445f-817c-21f9909dfe7a
name: Blackbox-0.1.0.dmg
status: In Progress
--------------------------------------------------
createdDate: 2026-03-06T21:28:26.904Z
id: 3c63ed16-be5d-4900-b82d-5df9557a47b4
name: Blackbox-0.1.0.dmg
status: In Progress
--------------------------------------------------
createdDate: 2026-03-06T21:24:14.558Z
id: 76df3f18-57a1-49b7-87e2-3f2bf0e4e6d5
name: Blackbox-0.1.0.dmg
status: Invalid
The Invalid submission (76df3f18) was error 4000 due to unsigned binaries in a bundled framework. That's been fixed in all subsequent submissions.
The app is a small macOS menu bar utility (~2 MB DMG), signed with Developer ID Application certificate, hardened runtime enabled, no restricted entitlements. codesign --verify --deep --strict and spctl --assess --type execute both pass locally.
Is there a known processing delay for first-time Developer ID accounts, or could something be stuck on the backend?
Thanks for any guidance.
Hi,
I'm trying to notarize a macOS app using xcrun notarytool, but the submission has been stuck in "In Progress" for over 24 hours.
Submission ID: a3e0914a-c45f-4614-bd7c-cbae4c7b0b55
Created: 2026-03-08T01:55:29.272Z
Team ID: 69YV6P6AKZ
It looks like the signature is valid and the only missing step is notarization.
I tried submitting twice, but the second submission is also stuck in In Progress.
Is this likely a backlog in the notarization service, or is there something that could cause submissions to stay "in progress" for so long?
Thanks!
Topic:
Code Signing
SubTopic:
Notarization
I'm distributing a macOS .pkg installer signed with Developer ID Installer and notarized via notarytool. On macOS 26.3 (Tahoe, Build 25D125), the package is rejected by Gatekeeper when downloaded from the internet.
What works:
pkgutil --check-signature → signed, Developer ID Installer, full chain (G2 intermediate + Apple Root CA)
xcrun stapler validate → "The validate action worked!"
xcrun notarytool info <id> → status: Accepted
The .app inside the .pkg passes spctl -a -vvv → "accepted, source=Notarized Developer ID"
What fails:
spctl -a -vvv --type install mypackage.pkg → rejected, origin=Developer ID Installer
Raw assessment: assessment:remote = true, assessment:verdict = false
Double-clicking the downloaded .pkg shows only "Move to Trash" / "Done" (no "Open" option)
syspolicyd log: meetsDeveloperIDLegacyAllowedPolicy = 0 (expected, since the cert is new), but no "notarized" match is logged
Certificate details:
Developer ID Installer, issued Feb 28, 2026, valid until 2031
OID 1.2.840.113635.100.6.1.14 (Developer ID Installer) — critical
OID 1.2.840.113635.100.6.1.33 — timestamp 20260215000000Z
Intermediate: Developer ID Certification Authority G2 (OID 1.2.840.113635.100.6.2.6)
security verify-cert → certificate verification successful
Build process:
productbuild --distribution ... --sign <SHA1> (also tried productsign)
Both produce: Warning: unable to build chain to self-signed root
xcrun notarytool submit → Accepted
xcrun stapler staple → worked
Workaround:
xattr -d com.apple.quarantine ~/Downloads/mypackage.pkg allows opening the installer.
Question:
Is spctl --type install assessment expected to work differently on macOS 26 Tahoe? The same signing and notarization workflow produces .app bundles that pass Gatekeeper, but .pkg installers are rejected. Is there a new requirement for .pkg distribution on macOS 26?
Environment: macOS 26.3 (25D125), Xcode CLT 26.3
I am trying to notarize my first macOS app for direct distribution outside the Mac App Store using Developer ID Application signing.
Team ID:
32S6XVAQPY
Environment:
macOS app distributed via Developer ID
notarytool with a saved keychain profile
archive exported locally, app zipped with ditto
What I already verified locally:
The archived app is signed with:
Developer ID Application: (32S6XVAQPY)
codesign --verify --deep --strict passes
spctl shows:
source=Unnotarized Developer ID
syspolicy_check distribution only reports the expected missing notary ticket
Hardened runtime is enabled
The app bundle and nested Sparkle executables were re-signed and now have valid Developer ID signatures with secure timestamps
Important note:
I previously had a real signing issue in nested Sparkle binaries, and Apple rejected that submission quickly as Invalid. I fixed those signatures, and now new submissions no longer fail quickly but remain stuck In Progress.
Submission IDs currently stuck:
bea6c4b3-b107-4c81-8042-6c58b1cf5087
5489e29c-d583-4779-a125-ca0fbd9cad0b
Earlier invalid submission with a concrete Sparkle signing error:
10df648b-eca8-428f-98d6-4cb4096153ad
Apple reported invalid Developer ID / missing secure timestamp on:
Sparkle.framework/Versions/B/Updater.app/Contents/MacOS/Updater
Sparkle.framework/Versions/B/Autoupdate
Sparkle.framework/Versions/B/XPCServices/Downloader.xpc/Contents/MacOS/Downloader
Sparkle.framework/Versions/B/XPCServices/Installer.xpc/Contents/MacOS/Installer
That Sparkle issue has since been fixed locally and re-verified.
Question:
Is there currently a notarization backlog or any known issue affecting first-time macOS notarizations or Developer ID submissions? At this point the remaining submissions appear valid locally but sit In Progress for a very long time.
All my notarization submissions are rejected with statusCode 7000 ("Team is not yet configured for notarization"), even though my
Apple Developer Program membership has been active since February 26, 2026.
Error log:
status: Rejected
statusCode: 7000
statusSummary: "Team is not yet configured for notarization"
My setup:
Team ID: 9NL8W3646T
Membership: Individual, ACTIVE (confirmed by Apple Support on Feb 26)
Certificate: Developer ID Application — valid, signing works
Hardened runtime: enabled
Latest failed submission: ce6a4ca9-ccc2-4838-b96a-d9ed16557237 (March 6)
I have support case 102832266798 open since March 4. Apple responded on March 6, but the email never arrived in my inbox and the
portal doesn't let me view the response.
Could DTS help enable notarization for my team? This is blocking distribution of my macOS app. Thank you.
Hi,
I have two notarization submissions that have been stuck in "In Progress" status for several hours with no resolution.
Submission IDs:
2158329b-8beb-400b-aa80-f8c2a5f30106 (submitted ~9 hours ago)
73174908-3ed9-4a85-afe0-a3c3b0722a61 (submitted ~3 hours ago)
Both submissions show "In Progress" indefinitely and no log is available for either. The notarytool --wait --timeout
30m timed out on the second submission with exit code 124.
The app is signed with a valid Developer ID Application certificate, all binaries including frameworks and dylibs are
individually signed with --options runtime and --timestamp. A previous submission returned valid on disk / satisfies
its Designated Requirement via spctl --assess.
Could you please investigate whether these submissions are stuck on your end, and advise on next steps?
Thank you.
Topic:
Code Signing
SubTopic:
Notarization