What Certificate do I need for my situation described here (signing my .app and .dmg for distribution) ?

I am distributing my .app in a .dmg. I need to sign the app and the dmg. (I'll notarize soon also).

I am not distributing in the Apple Store, but just a downloadable dmg from my website.


What certificate(s) do I need for my .dmg and .app out of the ones listed below?

Here's what I am thinking: Developer ID Installer for my .dmg, and Developer ID Application for my .app.

And what tool do I use in MAc OS to apply the certificate to the file?


*Create a new certificate

⬤ Apple Development

Sign development versions of your iOS, macOS, tvOS, and watchOS apps. For use in Xcode 11 or later.

⬤ Apple Distribution

Sign your apps for submission to the App Store or for Ad Hoc distribution. For use with Xcode 11 or later.

⬤ iOS App Development

Sign development versions of your iOS app.

⬤ iOS Distribution (App Store and Ad Hoc)

Sign your iOS app for submission to the App Store or for Ad Hoc distribution.

⬤ Mac Development

Sign development versions of your Mac app.

⬤ Mac App Distribution

This certificate is used to code sign your app and configure a Distribution Provisioning Profile for submission to the Mac App Store.

⬤ Mac Installer Distribution

This certificate is used to sign your app's Installer Package for submission to the Mac App Store.

Developer ID Installer

This certificate is used to sign your app's Installer Package for distribution outside of the Mac App Store.

Developer ID Application

This certificate is used to code sign your app for distribution outside of the Mac App Store.

Posted on Sep 16, 2022 7:34 AM

Reply
4 replies

Sep 16, 2022 6:40 PM in response to Bansaw

Do you really need a DMG? I think those are the correct certificates. I’ve never signed a DMG. I haven’t made one in almost 20 years.


If you are using Xcode, you can notarize the app right there and be done with it. If you are using something else, you will need to manually run “codesign” to sign your app and then “notarytool” (I think) to notarize it.

Sep 17, 2022 12:24 PM in response to Bansaw

Bansaw wrote:

I do need a DMG since it will display my license agreement, then a page where the user can drag the app to the applications folder.

You don't "need" it for that. Your app can, and should, display a license agreement on first launch. It isn't a good idea to rely on the DMG to do that. Users should be able to drag the downloaded app to the applications folder on their own. If, for some reason, they can't manage that, you would probably be better off without them. 😄

'm wondering, for the DMG, I use Developer ID Installer or Developer ID Application..?

Try Developer ID Installer and see if it works. What do you have to lose?

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

What Certificate do I need for my situation described here (signing my .app and .dmg for distribution) ?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.