There are several ways to sign a custom package file with the installed certificate. Two common methods are to either use Jamf Composer or the command line:
- Method 1—Use Composer
Open Composer Preferences.
Ensure the Build flat PKGs checkbox is selected.
- Select the Sign with: checkbox and choose your certificate from the pop-up menu.
- Click Save.
When a new package is created with these settings, it will be signed by the certificate.
- Method 2—Use the Command Line
Open Terminal and enter a command similar to the following:
/usr/bin/productsign --sign "<common name of certificate>" <input path to unsigned package> <output path to signed package>For example, if the certificate common name was "JamfSign", the command would be the following:
/usr/bin/productsign --sign "JamfSign" ~/Desktop/CustomPackage.pkg ~/Desktop/CustomPackage-signed.pkg