18

I’m running a script to generate an ipa file from Xcode. While invoking the xcodebuild a prompt is displayed saying “macOS wants to make changes.Enter an administrator’s name and password to allow this.” If the credentials are entered the ipa file will be generated. If not the ipa will not be generated. I figured out that the prompts are displayed because of the “Apple Worldwide Developer relations Intermediate Certificate which expires on Feb 7 2023”. Is there any way we can bypass this and the build and automatically generate the ipa without having to enter the keychain credentials ?

Haritha Thalapaneni
  • 181
  • 1
  • 1
  • 5

3 Answers3

29

Under the Keychain application, go to the private key associated with your developer certificate. Then do key > Get Info > Access Control. Down there, make sure your application (Xcode) is in the list Always allow access by these applications and make sure Confirm before allowing access is turned of, same for Ask for Keychain password.

Bram
  • 2,718
  • 1
  • 22
  • 43
  • Thank you very much for the response.Tried this change and this did not work for me. – Haritha Thalapaneni Dec 04 '20 at 11:57
  • I want to join codesign but I dont know where it is. – Vannes Yang Jun 29 '22 at 05:07
  • 1
    @VannesYang codesign should be located under `/usr/bin/codesign`. You can check it by running `which codesign` in your terminal. In the Access Control hit the `+` symbol, then do `⌘ + ⇧ + G` and type the location of your codesign path there. This should add it to the Access Control list – Bram Jun 29 '22 at 09:26
11

You might have put your certificates in the wrong group. I'm guessing you have put it into the "System" group. Then it will always prompt you to input username and password. You can solve this by removing it from "System" and then adding it to the "Login" group. I had this problem 10 minutes ago, and I solved it by doing this.

Jinyu Meng
  • 321
  • 2
  • 13
  • 4
    This solution work for me, simple just copy certificate from "System" group then paste to "Login" group, after that delete it from "System" group will be OK. – QHu91_IT Jun 06 '22 at 03:12
5

To fix this, simply select the distribution certificate that you need for signing your app in the Keychain application. Select the cert > Get Info > Trust. Then select Always Trust in the drop down and enter password to make this change permanent.

enter image description here

Droid Chris
  • 3,455
  • 28
  • 31