[NEWS] Apple Worldwide Developer Relations Intermediate Certificate updates

Apple Worldwide Developer Relations Intermediate Certificate updates

Starting January 28, 2021, the digital certificates you use to sign your software for installation on Apple devices, submit apps to the App Store, and connect to certain Apple services will be issued from the new intermediate Apple Worldwide Developer Relations certificate that expires on February 20, 2030. Learn how to prepare for the new intermediate certificate.

Using the new certificate with Xcode

If you’re running Xcode 11.4.1 or later, you’ll receive the updated certificate automatically when you sign an app after January 28, 2021. If you’re running an earlier release of Xcode and need to generate new certificates, download and install the new intermediate certificate and utilize the command line to sign your app. You can also archive your build with your existing Xcode version and sign it for distribution with Xcode 11.4.1 or later.

Why is the Apple Worldwide Developer Relations Certification Authority being updated now if the current version doesn’t expire until 2023?

Certificates cannot be issued with a validity period that extends past the intermediate certificate’s expiration date. Updating the intermediate certificate allows developers to obtain certificates before expiration that last for the expected duration, and provides ample time to prepare for the expiration of the existing intermediate certificate.

Do I need to regenerate any of my certificates?

No. Your existing certificates will continue to function until expiration or revocation, whichever comes first.

Will customers be affected by the certificate renewal?

No. Customers who have installed apps from the App Store or Safari Extensions will not be affected by the certificate renewal.

Will my apps in development continue working?

Yes. The development versions of your apps will continue to run until the provisioning profile used to compile them expires or you revoke your signing certificate.

Will my in-house enterprise apps continue working?

Yes. All in-house enterprise apps for iOS, iPadOS, tvOS, or watchOS that you’ve deployed will continue to run as expected until the provisioning profile used to compile them expires or you revoke your signing certificate. The iOS Distribution Certificate for the Apple Developer Enterprise Program was updated on September 1, 2020. iOS Distribution Certificates generated as part of the Apple Developer Enterprise Program between February 7 and September 1, 2020, will expire on February 7, 2023. Rotate the certificate before expiration to ensure your apps are installed and signed with an active certificate.

Should I keep both intermediate certificates installed?

Yes. The intermediate certificate that expires on February 7, 2023, will continue to issue select Apple services certificates, including Apple Push Notification service (APNs) SSL certificates and Apple Wallet pass signing certificates, so you should keep both versions installed on your development systems and servers. See the complete list and timeline of certificate changes below.

In what cases should I continue using the certificate that expires in 2023?

Continue using the existing Apple Worldwide Developer Relations Intermediate Certificate (expiring in 2023) if you use any of the certificates signed with it that are listed below. These services will be updated with a new intermediate certificate (expiring in 2030) by the the end of 2021. Keep both versions installed on your development systems and servers until later this year.

• Apple Push Notification service SSL (Sandbox)
• Apple Push Notification service SSL (Sandbox and Production)
• macOS Apple Push Notification service SSL (Production)
• Website Push ID
• WatchKit Services
• VoIP Services
• Pass Type ID
• Pass Type ID with NFC support
• App Store Receipt Signing

Is Developer ID signed software affected?

No. Developer ID signing certificates are associated with a different intermediate certificate and aren’t affected by this renewal.

Certificate update timeline

These certificates will be issued with the new intermediate certificate (expiring in 2030).

September 1, 2020

iOS Distribution for Enterprise Developer Program memberships

January 28, 2021

• Apple Development
• Apple Distribution
• iOS App Development
• iOS Distribution (App Store and Ad Hoc)
• Mac Development
• Mac App Distribution
• Mac Installer Distribution
• MDM CSR
• Apple Pay Merchant Identity

Updated by end of 2021

• Apple Push Notification service SSL (Sandbox)
• Apple Push Notification service SSL (Sandbox and Production)
• macOS Apple Push Notification service SSL (Production)
• Website Push ID
• WatchKit Services
• VoIP Services
• Pass Type ID
• Pass Type ID with NFC support
• App Store Receipt Signing

No changes

These certificates are not associated with the Apple Worldwide Developer Intermediate Certificate and are not affected by this change.

• Developer ID Application
• Developer ID Application with KEXT
• Developer ID Installer
• Apple Pay Payment Processing

 

Apple Worldwide Developer Relations Intermediate Certificate - Support - Apple Developer