Help adding a CSR in iPhone Portal - iphone

I am new to the iPhone. Following the instructions on the Apple website:
After creating a CSR, log in to the iPhone Provisioning Portal and navigate to ‘Certificates’ > ‘Development’ and click ‘Add Certificate’.
Click the ‘Choose file’ button, select your CSR and click ‘Submit’. If the Key Size was not set to 2048 bits during the CSR creation process, the Portal will reject the CSR.
Upon submission, Team Admins will be notified via email of the certificate request.
Once your CSR is approved or rejected by a Team Admin, you will be notified via email of the change in your certificate status.
I get stuck on the step about "Add Certificate." I do not have that option on my screen. My screen shows current development certificates, but it doesn't let me add a new one. I did this like a yr ago and it has the last Certificate and says download or revoke, but I cannot add a new CSR. What am I missing? Thanks.

The "How To' tab on the Certificates page is pretty helpful.
In addition, the main page of the provisioning portal has an assistant flow (look for a "Launch Assistant" button midway down the page) that takes you through all the steps of adding a new certificate.

Related

New Private Key and provisioning profile for an iphone app update

I use an external developer for a new version of my iphone app. Now, as the release is approaching, in order to create the final appstore build, he asked me for an updated provisioning profile. The existing I had, was expired so I created a new one from Provisioning Portal - Provisioning - Development (Tab) and send it to him.
Problem is that now he informed me that I had to send him a new .p12 file because the newly attached provisioning profile no longer matches the private key he had on file. I've read this tutorial and I have some questions.
From the Certificates- Distribution tab, I have a certificate ready for download, which must have been created same day with the new provisioning profile and it expires next year so I guess I don't have anything to do here.
So I want to ask how to create this private key file. I opened keychain access and I see that there is an iphone distribution keychain which is expiring in one year but it has a red color sentence saying "This certificate was signed by an unknown authority". If I export this and give it to the developer, is it ok ?
Thanks
Kostas
The p12 file is used to create the Certificate Signing Request, which is what you uploaded to the developer portal when you requested your distribution certificate. If you have not changed systems or deleted things it should be in your keychain.
Open Keychain Access, navigate to My Certificates, find your distribution certificate, expand the arrow to show the private key attached to it. Then right click on the private key and choose export, this is the file your developer needs.
Here is a screenshot showing what it should look like.

Cannot find Apple's step by step guide for setting up the provision profiles?

When I set up my provision profiles for my old computer Apple had a step by step guide on the provision portal. I do not see it there. There are how to's but not a step by step guide and nothing for setting up a distribution profile.
Does this document still exist? Are there any other step by step guides?
First question is do you have a distribution certificate installed on your machine? If the answer is YES move on to App ID section below
Distribution Certificate
If the answer to the above question is no, and you have no backup of your existing certificate, you will need to revoke the existing one in the iOS provisioning section at http://developer.apple.com and then click on "Request certificate"
Open keychain, request certificate from certificate authority, enter your name and email. Save it to disk.
Back to provisioning portal, click select file and choose the file you just saved. Give it a few seconds, refresh the screen and download the distribution certificate. Double click it to install it on Xcode.
At this point you should have a valid distribution certificate.
App ID
If you are creating an ad hoc distribution profile, you can create a wildcard app ID here. Enter any name you like and * for the build ID. This means you can use the same app ID for any adhocs build you create.
If it's for the app store, you need to name the bundle and this will need to match whatever you have setup on Xcode.
Distribution provisioning
Click provisioning then distribution, new profile. Choose if it is for App Store or Ad Hoc (see points above re: App ID), give the profile a name and in case of ad hoc ones, selected which devices you want to grant access to this distribution.
Once done, click submit, wait a few seconds and refresh the screen. Click download and double click to install the dist certificate on Xcode.
At this point you should have a valid distribution provisioning profila that matches your distribution certificate.
Go to Xcode, select your project, choose build settings and assign the distribution profile to your chosen configuration (usually release if for app store).
This was all off the top of my head so I may have missed a step or two, but hopefully you get the gist. If not feel free to ask any questions.
If I remember correctly, you go to where you would create a provisioning profile, and there is a "How to" tab.

certificate for provisioning profile not added to keychain access

I got a new Macbook Pro and I made a provisioning profile for my new app,
which I added to Organizer, and then downloaded the certificate.
However, the .cer file does not seem to get added to keychain access's login key,
which results in not being able to choose the provisioning profile on xcode...
What could've gone wrong?
I assume that you created the certificate using your old Mac.
In that case, the private key is still stored on your old machine. It was automatically created when you created the CSR which was used to make your current certificate and never sent to Apple. The .cer you download only contains the public key.
You need both for signing purposes.
To solve this problem, either import your private key from your old mac or create a new developer certificate (follow the steps outlined in the provisioning portal of creating and submitting a csr). Be aware that the second option will invalidate your old certificate as only one certificate is allowed per developer.
I think the previous answer solve your problem, but now I face same problem and the solution was different.
So, I want to share it if some one else need to it.
I do these steps:
1. download provision profile.
2. open Xcode>preferences>accounts.
3. I didn't add an account! So, I add my account in Apple developer program.
4. click "view details".
5. double click on provisioning profile and it will appear under "Provisioning Profiles".
Now, you can build your App ..

Recreated iphone distribution certificate - want to configure existing Provisioning Profiles to use new cert?

My iphone distribution certificate was due to expire. I clicked the button next to the error message on the distribution certificate tab to recreate it, and followed the instructions to create a new certificate. (Note I used a new CSR - might this be a problem?).
The certificate was created sucessfully, and I want to move my existing provisioning profiles to use this new certificate. I've done some reading around on line, and it sounds like I should just have to click the "modify" button next to the prov profile and save it again with no changes. However, the modify button hasn't appeared. I've done the obvious web pages refreshes etc. But I'm out of ideas and can't find any info on this anywhere.
Does anyone know anything about this?
After you have got the new Distribution Certificate (you can revoke the old one and follow the steps in Apple's page to recreate CSR - using your Certificate Assistance in XCode), now in
Provisioning>> Distribution, you will see all your profiles as INVALID.
There should be a Modify button next to INVALID status, once clicked, you may go inside and find out that the Submit button is disabled. Please click anywhere, recommended in the textbox of the App Name and the Submit button will be enabled. Just Submit and the Profile will becomes Active.
Hope this helps.

iPhone Provisioning: Is keychain is inserting wrong email address into the CSR?

I was having a problem where my Dev cert didn't expand (was not linked) to my private key.
I tracked the issue down to a discrepancy in the email used to create my Dev Cert and the one keychain was auto-selecting when I installed my CSR that I created to make my Dev cert.
I verified this by examining the contents of my CSR as follows.
1) Double click on the existing CSR file to start the 'install' process in Keychain.
2) Select the 'Let me override defaults for this request' checkbox.
3) Press Continue twice to get to the 'Create your certificate' page.
4) Select the 'Let me override defaults' checkbox.
5) Press Continue twice to get to the 'Certificate Information' page.
Here I found the email listed in the 'Email Address' field was different from the one I used to create the Dev Cert.
I tried to select the correct email and install the CSR, but I couldn't get the certs linked.
The only fix I could find was to recreate my Dev cert using that old email address so that when I installed the CSR in the normal way, everything was linked.
Has anyone else had this issue?
Does anyone know where keychain is getting that list of alternate email addresses, so I can clear it out?
Getting the certificates to work right used to be a complete mess. I tried to follow Apple's original instructions last year and was never able to get it to work. Fortunately, there's a new way of doing it that is much simpler and more reliable:
log into the Apple iPhone Dev Center (http://developer.apple.com/iphone/)
click the link (right side of screen) to the iPhone Developer Program Portal
right in the middle of the page there is a new tool. The title text says "Get your application on an iPhone with the Development Provisioning Assistant" and there is a button marked "launch assistant". Click the button marked "launch assistant" and follow the instructions.
Result: Apple will lead you by the hand through the whole certification process, and it's completely different than it was before - your current issue might not even come up.