19

Our company enterprise provisioning profile is set to expire in a month, but our distribution certificate is set to expire in a few more years. What are our options?

Do I need to regenerate a new provisioning profile and create a new build that I have to redistribute?

Or is there a simpler option like just sending out the new provisioning profile I generate? or better yet I don't have to do anything?

Thanks

Hulk_SMASH
  • 553
  • 1
  • 7
  • 13

2 Answers2

15

So generating a new provisioning profile will not invalidate any of the apps out there on devices. Simply generate the new provisioning profile, build a new version of the app with the new provisioning profile, and just make sure all your users / testers update to the new version of the app.

Alternatively, you could generate the provisioning profile and then distribute the profile to all the devices through MDM (if you're using an MDM solution) or by email (not a great experience). Basically the app will continue to run as long as the new provisioning profile gets on the device before the old one expires, whether that's through MDM, manually, or by installing a new version of the app with the provisioning profile in the .app payload. Or if your users download any app with the new provisioning profile, assuming that provisioning profile is set up with a wildcard app ID, that will also correct it (see information about that here: https://stackoverflow.com/a/29121777/3708242).

Basically, you need to do something before the provisioning profile expires (the sooner the better) and get that new provisioning profiles on the device (through one of the options above).

Community
  • 1
  • 1
wottle
  • 13,095
  • 4
  • 27
  • 68
  • Thank you. Unfortunately i made the mistake of regenerating the certificate as well so i have no choice but to redistribute the entire build. – Hulk_SMASH Jan 07 '16 at 14:59
  • 1
    Actually, if you haven't invalidated the old certificate, you could still generate a new profile with the original certificate. Then simply invalidate the new certificate. Then you wouldn't need to redistribute the whole app. Of course, if you invalidated the original cert, all your apps will stop working and you'll want to redistribute ASAP. Good luck! – wottle Jan 07 '16 at 15:06
  • @wottle. can you do this while having selected xcode's "Automatically manage signing"? I cant find profile on our developer account online. cant figure how to renew profile with this option selected – Adam Aug 31 '22 at 07:28
  • I believe you can. Been a while since I've been doing this, but you can find provisioning profiles that are generated automatically for you using this link: https://stackoverflow.com/a/45642752/3708242. Additionally, you can look in the .app payload after you generate a new build using your automatically managed signing profile. – wottle Sep 04 '22 at 18:52
4

The easiest thing to do is to go into developer.apple.com, choose the expiring provisioning profile, choose EDIT, then Generate.

It will create a new one for you, and you will need to refresh Xcode's stash of provisioning profiles before you re-build. However, if the app is already out to your "workforce" you will need to redistribute to your users

From Apple's documentation :

Managing Expiring Certificates and Provisioning Profiles

You are responsible for managing your team’s certificates and provisioning profiles. Apple Developer Enterprise Program certificates expire after three years and provisioning profiles expire after one year.

Before a distribution certificate expires, create an additional distribution certificate, described in Creating Additional Enterprise Distribution Certificates. You cannot renew an expired certificate. Instead, replace the expired certificate with the new certificate, described in Replacing Expired Certificates.

If a distribution provisioning profile expires, verify that you have a valid distribution certificate and renew the provisioning profile, described in Renewing Expired Provisioning Profiles.

Xcode manages your development certificates and team provisioning profiles for you.

bolnad
  • 4,533
  • 3
  • 29
  • 41