MacOS Information re: Signing & Notarizing

Jump to bottom

Ibi Keller edited this page Jan 28, 2026 · 1 revision

Credentials

Need a Developer ID Application certificate for signing applications. Can see valid certificates with security find-identity -p basic -v
Notarytool needs a password that is stored in the keychain, is stored using the following command: xcrun notarytool store-credentials "notarytool-password" --apple-id "ibi.keller@gmail.com" --team-id 5QKL3V72F3 --password <from_appleid.apple.com_stored_in_bitwarden!!>

Entitlements

Individual files and the entire .app can get different entitlements... see https://docs.avaloniaui.net/docs/deployment/macOS

Notarizing

It is preferred to notarize a .pkg or .dmg, not a .zip. Zip & 7z don't keep UTF8 filename encodings when zipping, which breaks notarizing.