Follow your company policies and ensure that you do not expose your iOS
certificates and provisioning profiles in third-party platforms, by signing your iOS
For example, your company's internal audit policies might
prevent your from uploading the iOS code signing certificates and provisioning profiles to
Pega Platform. In such situations, generate an unsigned iOS app
bundle in Pega Platform and then sign it on your local macOS
Before you begin: Prepare the framework for signing your iOS app locally:
- Use a computer with the macOS operating system.
- Obtain a signing certificate and a provisioning profile. For more information,
see Obtaining a signing certificate for iOS apps and Obtaining a mobile provisioning profile for iOS apps.
- Install the free Xcode application from the App Store, and then, in the Terminal
application, install the command line tools by entering
- Create an unsigned certificate set. For more information, see Creating an unsigned iOS certificate set.
- Generate an unsigned
xcarchive bundle, and then download it
to your computer. For more information, see Building mobile apps.
- Place the zipped
xcarchive bundle, the
.p12 file with the certificate, and the
.mobileprovision file in the same folder.For example: The folder has the following structure:
- Open the Terminal application, and then navigate to the folder with your
- Extract the zipped
xcarchive bundle.For example: Enter
unzip MyUnsigned.xcarchive.zip -d
- If the bundle already contains a code signature folder, remove the existing
code signature.For example: Enter
- Copy your provisioning profile to the extracted
folder.For example: Enter
- Provide the App ID entitlements that are required for signing the app:
- Create a new text file.
- Insert the following template in the file, and then replace the
TEAM_ID and BUNDLE_ID
placeholders with values that match your App ID configuration:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
- Save the file as
entitlements.plist in the folder
with your other files.For example: The folder has the following structure:
- At the command prompt, import your certificate from the
.p12 file to the Keychain application.For example: Enter
- At the password prompt, enter your password certificate.
- Optional: To review the signing identity, enter the following command:
- Sign the code of your app.For example: Enter
codesign -f -s <signing identity>
- Open the
xcarchive file in Xcode.For example: Enter
- In Xcode, ensure that your archive is highlighted, and then click
Distribute App.Result: Xcode launches a flow that signs your app and exports it as an
- Complete the app signing and export flow:
- Select the preferred method of distribution, and then click
- Select the distribution options for your app, and then click
- Select the certificate and provisioning profile that you want to use,
and then click Next.
- Review the summary of the app signing flow, and then click
- Choose the folder in which you want to save your iOS App Store Package
file, and then click Export.
.ipa file with your app is now
available in the chosen folder. You can launch the app and distribute it to your