Odd issue with expiring iPhone developer certs

  • FYI, I'm the Admin of one Enterprise iOS account and the Agent of my personal.

    In Xcode 4.6.1, I just tried to build an app to an iPod Touch under iOS 6.x.

    Surprisingly, I got build errors stating there were code signing errors.  Looking at my app's code signing, I reapplied the proper dev and dist provisioning profiles and tried another build just to see the same errors.

    Looking in the Organizer for our team member list, I see that I'm no longer part of it when I click on the Provisioning Profiles, or the Teams entry.

    In the Provisioning Portal on developer.apple.com, I'm still in the team, bot looking at my developer cert using Keychain Access, I see that it expired last Friday.

    OK.  That explains why I can't build, but here are some questions.

    1. Shouldn't we be getting emails that state if our dev cert is about to expire?  I got none.
    2. Refreshing or reissuing the cert.  This places the developer with the "you can't develop" condition and provides no pointer to "and here's how you fix it".
    Does anyone know where I can go to refresh the cert? Is that even possible?
    Do I have to issue a brand new one?  And if I do, this implies that all provisioning profiles need to be recreated again.
    What's the process here?

    3. Has anyone else here run into this situation?

    Oddly, I'm OK to use our distro profiles, but all the dev profiles are registering "Valid signing identity not found".

    Nice (sarcasm) little surprises like this are of more than a little concern, since if this happens to me, it will happen to every other team member when they least expect it and we'll have to spend/waste time fixing it.

    I see no facility in the Xcode to address this issue, or on the new Provisioning Portal.

    Some insight would be greatly appreciated.

    Cheers,
    - Alex Zavatone
  • Alex, even after you forewarned, me, I got busy (trying to work), and a bunch of my profiles expired without warning last night. grrhh.
  • This apparently happened to me on Friday without notice.  I JUST found out about it an hour ago.

    If your profile expiration this is with provisioning profiles, those can be easily refreshed and downloaded, then the apps redistributed.

    It's this surprise expiration of developer certs (without warning), that wastes critical development time.

    If you have profiles that have expired, you can refresh them, download them, install them and resign your app archives and make new apps.

    If this is with your own corporate/enterprise certs, these seem to expire one year after they were created, and can be refreshed through the portal.  I have done this through the old portal.  No idea about the current one.

    I actually would get warnings about those certs expiring.

    But, the kicker is that my iOS Developer Cert expired without a warning and Xcode/the provisioning portal doesn't even show my cert in the team anymore, even though I still am, but with an expired cert.

    I am still on the team since I am the administrator of it.

    This is really really bad design.

    Looking back into Xcode 4.2's Organizer, there is a "Developer Profile" with an Identity Name, an Organization and an Issuer.  That appears to be completely missing from Xcode 4.6.1.

    Hopefully, some solutions can be found at the link below, but if my certificate don't show up at all in the member center, then it's pretty useless.

    https://developer.apple.com/library/ios/#documentation/IDEs/Conceptual/AppD
    istributionGuide/MaintainingCertificatesandProvisioningAssets/MaintainingCe
    rtificatesandProvisioningAssets.html#//apple_ref/doc/uid/TP40012582-CH20-SW
    2


    I'll make sure to get back to the list with results on this.

    On May 16, 2013, at 3:01 PM, David Delmonte wrote:

    > Alex, even after you forewarned, me, I got busy (trying to work), and a bunch of my profiles expired without warning last night. grrhh.
    >
    >
    >
  • Issued a CSR from the Keychain Assistant and using the Certificates, Identifiers & Profiles center from the Enterprise account, downloaded and installed it.

    Then recreated the dev distro profiles downloaded and installed them.

    Xcode 4.6.1 on the 10.8.2 system was timing out while trying to refresh my profiles, so I had to manually export the public/private keys for my new cert as a p12 file, transfer it over and install in the keychain.  Then, I could download the updated profiles from developer.apple.com

    Of course, I'll have to distribute the updated profiles to the rest of the team too.

    What's a real mess here is that if you have multiple developers who all join your team at random times, and their developer certs expire 1+ year after creation, then throughout the year, you're going to be faced with this maintenance - and with no warning.

    I REALLY wish that there was a "your developer certificate is expiring, would you like to refresh it now"? option.  Also, when new provisioning profiles are created, they have new expiration dates, so your users can have seemingly random provisioning profile expiration messages if they ever ran a dev copy of your app sometime within the past year.

    It's issues like this that create maintenance work for teams when they could be getting work done, and support calls when certain execs who needed to see your app on their device suddenly have the meaningless "provisioning profile is expiring" message appear - which doesn't say which apps that expiration affects.

    Anyway, back on the road.  Cheers.  Hope this helps someone.

    If there is a better way, please tell me.

    Oddly, when I try to open that cert in 10.8 in the Keychain, it applies that cert to my personal Mac developer account

    On May 16, 2013, at 4:23 PM, Alex Zavatone wrote:

    > This apparently happened to me on Friday without notice.  I JUST found out about it an hour ago.
    >
    > If your profile expiration this is with provisioning profiles, those can be easily refreshed and downloaded, then the apps redistributed.
    >
    > It's this surprise expiration of developer certs (without warning), that wastes critical development time.
    >
    > If you have profiles that have expired, you can refresh them, download them, install them and resign your app archives and make new apps.
    >
    > If this is with your own corporate/enterprise certs, these seem to expire one year after they were created, and can be refreshed through the portal.  I have done this through the old portal.  No idea about the current one.
    >
    > I actually would get warnings about those certs expiring.
    >
    > But, the kicker is that my iOS Developer Cert expired without a warning and Xcode/the provisioning portal doesn't even show my cert in the team anymore, even though I still am, but with an expired cert.
    >
    > I am still on the team since I am the administrator of it.
    >
    > This is really really bad design.
    >
    > Looking back into Xcode 4.2's Organizer, there is a "Developer Profile" with an Identity Name, an Organization and an Issuer.  That appears to be completely missing from Xcode 4.6.1.
    >
    > Hopefully, some solutions can be found at the link below, but if my certificate don't show up at all in the member center, then it's pretty useless.
    >
    > https://developer.apple.com/library/ios/#documentation/IDEs/Conceptual/AppD
    istributionGuide/MaintainingCertificatesandProvisioningAssets/MaintainingCe
    rtificatesandProvisioningAssets.html#//apple_ref/doc/uid/TP40012582-CH20-SW
    2

    >
    > I'll make sure to get back to the list with results on this.
    >
    >
    > On May 16, 2013, at 3:01 PM, David Delmonte wrote:
    >
    >> Alex, even after you forewarned, me, I got busy (trying to work), and a bunch of my profiles expired without warning last night. grrhh.
    >>
    >>
    >>
    >
    >
    > _______________________________________________
    > Do not post admin requests to the list. They will be ignored.
    > Xcode-users mailing list      (<Xcode-users...>)
    > Help/Unsubscribe/Update your Subscription:
    > https://lists.apple.com/mailman/options/xcode-users/<zav...>
    >
    > This email sent to <zav...>
previous month may 2013 next month
MTWTFSS
    1 2 3 4 5
6 7 8 9 10 11 12
13 14 15 16 17 18 19
20 21 22 23 24 25 26
27 28 29 30 31    
Go to today