As I didn’t get any reply associated to this subject to date neither from Apple Help nor from the Apple Developer Help Discussion board, I wished to provide it a strive right here too. I additionally intention to ask this query as a result of there are posts saying that the notarization course of was accomplished however the subject persists (e.g. right here), so I need to be certain to make issues proper proper from the beginning.
I’m chargeable for the cell app and thus additionally of the apple developer and app retailer join accounts of an organization.
An exterior freelancer developed a software program package deal for us which we intention to supply for set up and use on macOS techniques of our prospects; distributed completely outdoors of the Apple App Retailer. The software program package deal has nothing to do with the cell app. MacOS’ Gatekeeper at the moment warns and even prevents our prospects concerning the set up of the package deal on their machine; just about as described right here: https://developer.apple.com/developer-id/.
In line with a earlier speak with Apple’s Help, the software program package deal (.app) the Freelancer developed should be signed (and optionally notarized) with one among our personal certificates. As we can’t grant selective app retailer join entry to 3rd individuals (just for the involved certificates), we want to not present entry to our total apple developer account to the freelancer, for the only purpose of the certificates & signing course of. In line with earlier makes an attempt with Apples’ help concerning probably the most possible answer on this case, they advisable me to handle the signing of the package deal of the freelancer, and easily request the package deal from the freelancer.
I’ve thus generated an in accordance Developer ID Certificates, however concerning the signing course of, I am confused. I understand how signing works with cell apps in XCode, however concerning software program that’s not distributed all through the App Retailer on macOS, I am not sure in regards to the course of. Additionally, so far as I do know, the entitlements of the appliance are concerned within the signing course of. So my concern is that merely having the software program package deal (.app) from the freelancer will not be actually sufficient to finish the signing + notarization course of? Will not I would like additional details about the app’s entitlements and so on.?