Signing flat PKGs and QuickAdd packages allows users to install them on computers that have Apple's Gatekeeper feature set to only allow applications downloaded from the Mac App Store and identified developers. It also ensures that the packages appear as verified to users. Signing these packages requires an installer certificate (.p12) from Apple.
Installer certificates can be obtained from Apple using Xcode or the Apple Developer Member Center. This article explains how to obtain an installer certificate from Apple using Xcode.
To obtain an installer certificate from Apple using Xcode, you need:
An Apple Developer membership with team Agent privileges in the Apple Developer Program. To enroll in the Apple Developer Program, visit the following website: https://developer.apple.com/programs/
A computer with macOS v10.11 or later
Xcode 7.3 or later
- Select the appropriate team with the "Agent" role assigned, and click Manage Certificates.
- In the window that opens, Control-click (right-click) Developer ID Installer, and select Export.
- Enter a name for the .p12 file and the Developer Profile password, and click Save.Note:
The exported installer certificate is valid for five years.
To renew the installer certificate, repeat the above process.