17

I just installed a new iPhone Distribution certificate that was exported as a .p12 from someone else's computer.

When I try to archive with a provisioning profile that's tied to this new certificate I get this Invalid trust settings error:

enter image description here

Restore system default trust settings for certificate "iPhone Distribution" in order to sign code with it.

However, when I Repair Trust Settings, which sets the Trust Settings for the certificate to "Use System Defaults", it says that the certificate is not trusted:

enter image description here

iPhone Distribution certificate is not trusted

If I try to archive in this state, I get this error:

Warning: unable to build chain to self-signed root for signer "iPhone Distribution"

And I'm stuck in an infinite loop. Please help!

Adam Zarn
  • 1,868
  • 1
  • 16
  • 42
  • Double-click to open the distribution certificate, flip open the Trust part, and change the Trust setting to Always Trust. Does that fix it? If not, maybe you need a new Apple Worldwide Developer Relations Certification Authority certificate; has yours expired? If so, get a new one at the Member Center. – matt Oct 29 '20 at 18:48
  • Changing it to "Always Trust" results in the first error: Invalid Trust Settings. Then it says it needs to use "Use System Defaults". Maybe I'll try updating my Apple Worldwide Developer Relations Certification Authority certificate. – Adam Zarn Oct 29 '20 at 19:15

7 Answers7

20

I had the Apple Worldwide Developer Relations Certification Authority certificate that expires on Feb 7, 2023 at 3:48:47 PM.

My issue was resolved when I installed the one that expires on Feb 19, 2030 at 6:00:00 PM.

You can download either one of those here: https://developer.apple.com/account/resources/certificates/add

Adam Zarn
  • 1,868
  • 1
  • 16
  • 42
12

Trust in an Apple certificate is provided through the Apple Worldwide Developer Relations Certification Authority certificate. It sounds like you don't have one. It looks like this:

enter image description here

If you don't have one of those, get it from the Apple Developer Member Center. Even if you do have one, try downloading a newer one.

matt
  • 515,959
  • 87
  • 875
  • 1,141
  • I do have one, when I search in "All Items", it says it's in the System keychain, as well as the login keychain. – Adam Zarn Oct 29 '20 at 18:57
  • Has it expired? They do that sometimes. – matt Oct 29 '20 at 19:03
  • It's not expired. I updated the question to show the Certificates category instead of My Certificates. – Adam Zarn Oct 29 '20 at 19:05
  • Hmm. What about what I suggested in my comment? – matt Oct 29 '20 at 19:10
  • Thanks for your help. I just installed the latest worldwide cert (expiring 2030) and now my distribution certificate is trusted. Why wouldn't the one expiring in 2023 work though? – Adam Zarn Oct 29 '20 at 19:30
  • They do go bad from time to time. — Added to my answer the suggestion to get a new one in any case; that way, this Q&A will be more useful to posterity. – matt Oct 29 '20 at 19:41
  • 3
    This worked when I downloaded the Certificate which expires in 2/20/2030. The 2023 certificate did NOT work. – Bassman Mar 03 '21 at 09:21
  • 1
    Same thing worked for me, Downloading 2/20/2030 from [Apple's Certificate Authority](https://www.apple.com/certificateauthority/) magically fixed my issue. Why the f**** does this solve the issue?!?! – craastad Jul 29 '21 at 16:10
6

After not getting any luck downloading the Apple Worldwide Developer Relations Certification Authority certificate 2030, what worked for me was going to the system keychain and searching for the certificate that was having trouble (something like 5CTYZUT475) and I changed the always trust to use system defaults.

jas-chu
  • 525
  • 5
  • 4
  • Immediately worked for me, thanks! I did like you said, in Keychain, I entered part of the Cert name it gave into the search box. double clicked to get-info, expanded Trust, changed top one to system default, closed, saved. Tried again, worked. – SeanMC Feb 11 '22 at 14:55
1

If it's Mac,

  1. Right click certificate in KeyChain and go to getInfo
  2. Expand Trust
  3. Change 'Always trust' to 'system default'

For this error that fixed for me.

Saran
  • 6,274
  • 3
  • 39
  • 48
0

None of the above worked for fixing my "Developer ID Application" showing up as not trusted.

Turns out there was a different intermediate certificate called "Developer ID - G2 (Expiring 09/17/2031)" that I needed. Available for direct download from here.

Erik J
  • 342
  • 1
  • 11
0

in my case, it was command-line tools that were missing. I think command line tools automatically downloads worldwide certificate.

So I go to XCode preferences, then locations, and in command-line tools selected 13.3.

'Quit' Xcode relaunch XCode. Quit keychain and relaunch keychain. And now my ios distribution certificate was trusted.

enter image description here

maddy
  • 4,001
  • 8
  • 42
  • 65
0

For me it was helped installing new apple root certificate. Direct link which could be found here. Which could be found from that support page.

Maxim Kholyavkin
  • 4,463
  • 2
  • 37
  • 82