Developer provisioning profile apple

iOS Provisioning Portal Help

Retired Document

Important: This document has been replaced by App Distribution Guide . App Distribution Guide offers step-by-step instructions for configuring, testing, and submitting your app for approval. This new document describes how to use Xcode and other Apple developer tools to create and configure your project, request signing certificates, create provisioning profiles, configure special App Store technologies, test your app on devices, create your app record in iTunes Connect, and submit your app for approval to Apple. If you have a company Apple Developer Program membership, you’ll also learn how to manage your team’s certificates and provisioning assets.

Downloading a Provisioning Profile

Important This document has been replaced by App Distribution Guide . App Distribution Guide offers step-by-step instructions for configuring, testing, and submitting your app for approval. This new document describes how to use Xcode and other Apple developer tools to create and configure your project, request signing certificates, create provisioning profiles, configure special App Store technologies, test your app on devices, create your app record in iTunes Connect, and submit your app for approval to Apple. If you have a company Apple Developer Program membership, you’ll also learn how to manage your team’s certificates and provisioning assets.

After logging in to the iOS Provisioning Portal, click Provisioning in the sidebar.

Click either the Development or Distribution tab to display the appropriate profiles.

Click the Download button, in the Actions column, for the profile you want to download.

Prerequisite

To run an app on a device, you need the accompanying provisioning profile you download from the iOS Provisioning Portal .

There are two types of provisioning profiles, one for development and one for distribution. Both profiles are .mobileprovision files.

All team members can download a development provisioning profile from the Provisioning section of iOS Provisioning Portal. When downloading a development provisioning profile, remember that you can install and test apps on a device only if that device ID, app ID, and your development certificate are included in the profile.

Only team admins can download the distribution provisioning profile. In fact, the Distribution tab is not visible to team members. To test an application that has been built for distribution, you need the distribution provisioning profile and the .app file.

After you obtain the provisioning profile file, you can install it on your device.

Copyright © 2013 Apple Inc. All Rights Reserved. Terms of Use | Privacy Policy | Updated: 2013-04-23

Источник

What is a provisioning profile & code signing in iOS?

If somebody ask you about the iOS app deployment process, you can easily give the answer . But when they ask a level deeper, you may not have an answer. The above question is one such thing which every ios developer should know. Let’s see what it is.

Apr 10, 2018 · 5 min read

Source: Stackoverflow and internet 🤓.

Apple’s definition : A provisioning profile is a collection of digital entities that uniquely ties developers and devices to an authorized iPhone Development Team and enables a device to be used for testing.

Why Provisioning Profiles?

Unlike Android, you can’t install any app on an iOS device. It h as to be signed by Apple first. However, when you’re developing an app, you probably want to test it before sending it to Apple for approval. Provisioning profile act as a link between the device and the developer account. During development, you choose which devices can run your app and which app services your app can access. A provisioning profile is downloaded from your developer account and embedded in the app bundle, and the entire bundle is code-signed. A Development Provisioning Profile must be installed on each device on which you wish to run your application code. If the information in the provisioning profile doesn’t match certain criteria, your app won’t launch.

Each Development Provisioning Profile will contains:

• Development Certificates — development certificate. These are for developers who want to test the app on a physical device while writing code.
• Unique Device Identifiers (List of devices that the app can run on)
• an App ID ( this can include a * wild card to be used for many applications with similar bundle identifiers ). —An App ID is a two-part string used to identify one or more apps from a single development team.

Devices specified within the provisioning profile can be used for testing only by those individuals whose iPhone Development Certificates are included in the profile. A single device can contain multiple provisioning profiles.

So, What is happening when we connect the device to xcode and installs the app??

When you install the application on a device the following things happens:

• the provisioning profile in the Mac goes to the developer certificate in your key chain.
• xcode uses the certificate to sign the code.
• device’s UUID is matched with the IDs in the provisioning profile.
• AppID in the provisioning profile is matched with the bundle identifier in the app.
• The entitlements required are associated with the App ID.
• The private key used to sign the app matches the public key in the certificate.

Here is a screenshot from xcode signing section:

SO, from the above image, you can see that AppID is checked, certificate is validated, Team is matched, capabilities and entitlements are matched .

If all the above steps are successful the signed binary is sent to the device and is validated against the same provisioning profile in the app and finally launched. If anyone of these conditions fail, then the app will not install — and you’ll see a greyed-out app icon.

The difference between Development and Distribution Profiles is that Distribution Profiles don’t specify any Device IDs. If you want to release an App which should be limited to a number of registered devices, you need to use an Ad-Hoc profile for that.

Distribution Profiles is used to submit app to the App Store for distribution. After the app is reviewed by apple they sign in the app with their own signature that can run on any device.

That’s all fine, But what is code signing?

Signing your app allows iOS to identify who signed your app and to verify that your app hasn’t been modified since you signed it. The Signing Identity consists of a public-private key pair that Apple creates for you.

Asymmetric cryptography

Asymmetric cryptography uses a public key and a private key. The users have to keep their private key for themselves, but they can share the public key. And using those public and private keys, a user can prove that he is indeed himself.

How asymmetric cryptography works??

Assume there is a UserA and UserB .

• UserA create a PrivateKeyA + PublicKeyA.
• UserB create a PrivateKeyB + PublicKeyB.

To secure the communication between UserA and UserB,

• UserA shares his PublicKeyA with UserB .
• UserB shares his PublicKeyB with UserA.

… and both users keep the private key with themselves.

When UserA sends a message to UserB,

• UserA encrypts the message with UserB’s PublicKeyB and send the message.
• This message can only be decrypted using UserB’s PrivateKeyB.

… The same thing happens when the UserB sends a message to UserA.

Watch this video for more understanding about asymmetric cryptography : Youtube video by savjee.

What is CSR(Certificate Signing Request) in iOS ??

CSR is not something that is used only in iOS. It is used in many places.

A CSR or Certificate Signing request is a block of encoded text that is given to a Certificate Authority when applying for a certificate.

Here , we create a CSR and give it to apple which will create the certificate for you. It also contains the public key that will be included in the certificate. A private key is usually created at the same time that you create the CSR, making a key pair. A certificate authority will use a CSR to create your certificate, but it does not need your private key. You need to keep your private key secret. The certificate created with a particular CSR will only work with the private key that was generated with it. So if you lose the private key, the certificate will no longer work.

(optional — refer this link to understand how CSR works for SSL certificates. The procedure and working is almost similar)

The process :

• Create a Certificate Signing Request (CSR) through the Keychain Access Application.
• Keychain Application will create a private key (private key will be stored in the keychain) and a certSigningRequest file which you’ll then upload to Apple.
• Apple will proof the request and issue a certificate for you. The Certificate will contain the public key that can be downloaded to your system. After you downloaded it you need to put it into your Keychain Access Application by double clicking it. The Certificate will be pushed into the Keychain and paired with the private key to form the Code Signing Identity.
• Finally, at the time of app installation, the private key used to sign the app matches the public key in the certificate. If it fails, app is not installed.

If you enjoyed reading this post, please share and give some clapps so others can find it 👏👏👏👏👏 .

If you have any comment, question, or recommendation, feel free to post them in the comment section below!

Источник

Create Provisioning Profile

I’m trying to start Appium with a given .ipa and run the Inspector while my device (ipad mini 2) is connected to my mac machine via usb cable, but I’m getting such error:

[iOSLog] [IOS_SYSLOG_ROW] May 30 14:23:05 Test-iPad notification_proxy[121] : 0x16e247000 -[MNPLockdownConnection receiveMessage]: lockdown_receive_message error!

While I google it I found that in order to solve it need to enable the UI Automation option from Developers options in the device itself.

But I cant see «Developers Options» in the settings of my device (with ios 9.3.1 — XCode 6.4)!

I serached for it and found that in order to enable it need to have a provisioninf profile:

1. Run Google Chrome, Mozilla Firefox or Safari.
2. In the iOS Dev Center, click Certificates, Identifiers & Profiles.
3. In the iOS Apps panel, click Provisioning Profiles.
4. Click +.
5. Select iOS App Development and click Continue.
6. Select an App ID to associate with the provisioning profile and click Continue.
   To be able to use one development provisioning profile across multiple apps, select a wildcard App ID, if available.
7. Select one or more certificates for development to include in the provisioning profile and click Continue.
   Only certificates for development are listed.
8. Select one or more devices to include in the provisioning profile and click Continue.
9. Enter a name for the profile and click Generate.
10. (Optional) Click Download to download the provisioning profile.

But when signing in with my account I have no such option: Certificates, Identifiers & Profiles.

Источник

iOS Team Administration Guide

Retired Document

Important: This document has been replaced by App Distribution Guide . App Distribution Guide offers step-by-step instructions for configuring, testing, and submitting your app for approval. This new document describes how to use Xcode and other Apple developer tools to create and configure your project, request signing certificates, create provisioning profiles, configure special App Store technologies, test your app on devices, create your app record in iTunes Connect, and submit your app for approval to Apple. If you have a company Apple Developer Program membership, you’ll also learn how to manage your team’s certificates and provisioning assets.

Creating and Downloading a Distribution Provisioning Profile

To distribute an app, a team admin must create a distribution provisioning profile (this profile is different from a Development Provisioning Profile). The distribution provisioning profile consists of a name, a distribution certificate, and an app ID. The name is used only so that you can identify a provisioning profile. A provisioning profile is valid for one year.

Apps can be distributed either through the App Store with an iTunes Connect account or through ad hoc distribution. If you are enrolled in the Enterprise Program, you can also use in-house distribution. For more on distribution methods see Distributing an App .

To publish an app to the App Store, create a distribution provisioning profile specifying App Store as the distribution method.

To use ad hoc distribution, create a distribution provisioning profile specifying Ad Hoc as the distribution method and include a list of up to 100 devices authorized to run the app.

To use in-house distribution, create a provisioning profile specifying In-House as the distribution method.

Creating a Distribution Provisioning Profile

Downloading and Installing a Distribution Provisioning Profile

To install the provisioning profile on your Mac, drag the .mobileprovision file onto the Xcode, iPhone Configuration Utility, or iTunes icon in the Dock.

Copyright © 2013 Apple Inc. All Rights Reserved. Terms of Use | Privacy Policy | Updated: 2013-04-23

Источник