Certificate Issues

• Certificate Statuses
• Not Installed
• Invalid
• Expired
• Missing Private Key
• Certificate has invalid "Trust" settings or is self-signed
• Authority Certificate has invalid "Trust" settings.
• Unable to build chain to self-signed root

Not Installed

The certificate is not installed on this computer. Please see Manage Certificates.

Invalid

There is a problem with this certificate that App Wrapper can not pin point. Please download a new copy of the certificate, see Manage Certificates.

Expired

The certificate has expired and can no longer be used for code signing. Please download a new copy of the certificate, see Manage Certificates.

Missing Private Key

1. Find the certificate in Keychain Access, use the "Search field" in the top right hand corner of the window.
2. Delete the certificate.
3. Visit https://developer.apple.com/account/resources/certificates/ to download a new copy of the certificate.
4. Double click the certificate to install the certificate.
5. In Keychain Access, find the newly installed certificate, and click on the "disclosure triangle" next to the name.
   

   ⚠️ If there isn't a triangle next to the name, it means that the key is still missing, and the certificate will need recreating. Guide to recreating certificates.

Certificate has invalid "Trust" settings or is self-signed.

1. Open Keychain Access.
2. Use the search field to find the certificate, if there are multiple, look for one with a blue + sign in it's icon.
3. Double click that certificate, click the triangle next to "Trust" to expose the options.
4. Select "Use System Defaults" next to "When using this certificate:"

Authority Certificate has invalid "Trust" settings.

• Developer ID certificates use the authority certificate "Developer ID Certification Authority".
• App Store Submission certificates use the authority "Apple Worldwide Developer Relations Certification Authority"

1. Open Keychain Access.
2. Use the search field to find the "Authority Certificate", if there are multiple, look for one with a blue + sign in it's icon.
3. Double click that certificate, click the triangle next to "Trust" to expose the options.
4. Select "Use System Defaults" next to "When using this certificate:"

Unable to build chain to self-signed root

Warning: unable to build chain to self-signed root for signer "Apple Distribution:

1. Open Keychain Access.
2. Use the search field to find "Apple Worldwide Developer Relations", searching for the exact certificate name fails for me under macOS Big Sur.
3. Look for the certificate that expires Feb 20, 2030. If you can't find one, you can download it from https://developer.apple.com/support/expiration/.
4. Double click that certificate, click the triangle next to "Trust" to expose the options.
5. Select "Use System Defaults" next to "When using this certificate:"

Try wrapping again

Warning: unable to build chain to self-signed root for signer "Developer ID Application:

1. Open Keychain Access.
2. Use the search field to find "Developer ID Certification Authority".
3. Double click that certificate, click the triangle next to "Trust" to expose the options.
4. Select "Use System Defaults" next to "When using this certificate:"

Try wrapping again