-
Notifications
You must be signed in to change notification settings - Fork 5
Configuring package notarization

Notarization is an additional safeguard against signed installer packages being modified by a malicious third party. The Apple notary service is an automated system that scans an installer package for malicious content and checks for code-signing issues, so notarization ensures that Apple has verified that the signed code is free of malicious content. For more information on notarization, please see the FAQ
To use notarization with this app, you will need an app-specific password for the Apple ID of an Apple Developer account. This may be the same account which generated your Developer ID Installer certificate, but this is not required. For more information on this, please see the following link: Customizing the notarization workflow
For more information on creating app-specific passwords, please see the following link: Sign in to apps with your Apple ID using app-specific passwords
To configure notarization, you will to do the following:
- Configure package signing: Configuring package signing
- If Xcode or the Xcode command line tools are not already installed, install the necessary support tools.
Once the needed support tools have been installed, package signing has been configured and an app-specific password for the relevant Apple Developer account is available, use the following procedure to enable the app’s notarization options:
- Launch the app.
- Enable the
Sign packagesoption.
- Enable the
Notarize packagesoption. You will be prompted for the Apple ID of the Apple Developer account, as well as the app-specific password created for that account.
- The
Notarize packagesoption will be enabled once the credentials have been entered.
Reverting to Default Settings
To change back to the default setting, please use the procedure available via the link: Removing notarization credentials