what’s new in xcode app signing - apple inc. · identiﬁes you to users prevents spooﬁng...

© 2016 Apple Inc. All rights reserved. Redistribution or public display not permitted without written permission from Apple.

Developing and distributing

Developer Tools #WWDC16

Session 401

What’s New in Xcode App Signing

Joshua Pennington Tools Engineering ManagerItai Rom Tools Engineer

What is signing?What’s New in Xcode Signing

Identifies you to users


Identifies you to usersPrevents spoofing


Identifies you to usersPrevents spoofingAllows access to system services


OverviewWhat’s New in Xcode Signing

FundamentalsSigning Certificate per MacSigning in XcodeBest Practices

Fundamentals

codesign

OverviewFundamentals

Fundamentals

Issued by Apple

Signing certificatesFundamentals

Issued by AppleDevelopment and Distribution


Issued by AppleDevelopment and DistributionMust have a private key


Issued by AppleDevelopment and DistributionMust have a private keyApple never has the private key


Provisioning profilesFundamentals

Issued by Apple


Issued by AppleApp-specific


Issued by AppleApp-specificAllows running on devices


Issued by AppleApp-specificAllows running on devicesAllows entitlements


EntitlementsFundamentals

Declares support for capabilities


Declares support for capabilitiesDefined per-target


Declares support for capabilitiesDefined per-targetUse the Capabilities tab


Signing in XcodeFundamentals

Signing Certificate per Mac

Multiple DevelopmentCertificates

OverviewSigning Certificate per Mac


Development only


Development onlyXcode and developer website


Development onlyXcode and developer websiteCreated by Xcode 8 and later


Development onlyXcode and developer websiteCreated by Xcode 8 and laterUsable with all versions

Signing in Xcode

Signing can be complicatedSigning in Xcode

Fix IssueSigning in Xcode 7

Fix IssueSigning in Xcode 7

What was the issue?What did Fix Issue do?Why did Fix Issue do that?Why do I even have to click a button…?

NEW

Fully redesignedSigning in Xcode 8

NEW


Brand new infrastructure

NEW


Brand new infrastructureNew workflows and UI

NEW


Brand new infrastructureNew workflows and UIActionable messaging

NEW


Brand new infrastructureNew workflows and UIActionable messagingStatus reporting

Automatic Signing✓

Customized Signing

Automatic signingSigning in Xcode


Creates signing certificates


Creates signing certificatesCreates and updates App IDs


Creates signing certificatesCreates and updates App IDsCreates and updates provisioning profiles


Prompts you only when necessary


Prompts you only when necessarySigning report shows what Xcode did and why

DemoAutomatic Signing


Development signing


Development signingLimited to Xcode-created provisioning profiles


Development signingLimited to Xcode-created provisioning profilesDistribution signing assets aren’t touched


Completely redesigned in Xcode 8


Completely redesigned in Xcode 8Stays out of your way


Completely redesigned in Xcode 8Stays out of your wayManages signing so you can focus on development

Customized Signing

Customized signingSigning in Xcode


Manually created profiles only


Manually created profiles onlyAny type of profile


New build setting, PROVISIONING_PROFILE_SPECIFIER


New build setting, PROVISIONING_PROFILE_SPECIFIERReferences profiles by name


New build setting, PROVISIONING_PROFILE_SPECIFIERReferences profiles by nameUpdate profiles without making project changes

DemoCustomized Signing

Customized Signing

Best Practices

DevelopmentBest Practices


Use automatic


Use automaticAdd all developers to team


Use automaticAdd all developers to teamUse the capabilities tab

ManualBest Practices


Don’t set CODE_SIGN_IDENTITY


Don’t set CODE_SIGN_IDENTITYUse the new general tab UI


Don’t set CODE_SIGN_IDENTITYUse the new general tab UIUse the capabilities tab


Don’t set CODE_SIGN_IDENTITYUse the new general tab UIUse the capabilities tabMigrate to automatic

DistributionBest Practices


Development


Development Distribution

Organizer

Summary

Multiple development certificatesXcode 8 automatically manages signingDedicated customized signing mode

More Information

https://developer.apple.com/wwdc16/401

Related Sessions

How iOS Security Really Works Nob Hill Tuesday 4:00PM

What’s New in Security Nob Hill Tuesday 5:00PM

Introduction to Xcode Pacific Heights Thursday 1:40PM

Labs

Signing and Distributing Your App with Xcode Developer Tools Lab C Tuesday 12:00PM

Signing and Distributing Your App with Xcode Developer Tools Lab C Wednesday 3:00PM

what’s new in xcode app signing - apple inc. · identiﬁes you to users prevents spooﬁng...

Documents