How to sign and authenticate VST and AU plug-ins for Mac?

[CatABC]

I have successfully registered an Appledevelop account. What should I do next to sign and authenticate the plugin I exported?To solve the problem of Mac pop-up warning when using it，Will there be a detailed tutorial?

[Lindon]

@CatABC theres a comprehensive set of instructions over at KVRAudio, which will be your major friend - yes you will need to read all 20+ pages...but page 1 post 1 is the most important.

Just a moment...

(www.kvraudio.com)

but I included a step by step guide in this post;

Notarisation for dummies

Have you enabled the Hardened Runtime properties in the autogenerated Projucer project?

Forum (forum.hise.audio)

its a bit out of date as you now notarize with notary tool so codesigning its fine and stapling its fine but the step in the middle(Step 3) is now different...

[Lindon]

Ok well I can see this turning into the cluster f*** it usually is so here's how to code sign and notarize and staple your plugin - note this is for distributing plugins - not for distributing installers (like .pkg and .dmg files), also note you will need your apple ID, your team Id and to have made (and kept) a password for your notary tool all in the apple dev web site...you will also need the relevant certificates(A developer ID Installer certificate) in your Keychain Access

1. build/compile your plugin.
2. copy your plugin to the desktop
3. open a terminal window
4. move to the desktop with this command:
   cd desktop
   5.codesign your plugin with this command:

codesign --deep --force --options runtime --sign "Developer ID Application: your dev name ( your dev id)" "/Users/your username/Desktop/your plugin name.vst3"

6. zip up your plugin into yourpluginname.zip and leave it on the desktop
7. Notarize your pluginzip with this command:

xcrun notarytool submit --apple-id "your apple id (an email addess is likely)" --password "your notray tool password" --team-id "your team id" "yourpluginname.zip" --wait

8. wait... it will tell you Processing.... and eventually tell you Accepted (if it works)
9. Staple your plugin on the desktop --- no thats not the zip you just sent to Apple, its the plugin from step 2.... use this command:

xcrun stapler staple "/Users/your user name/Desktop/your plugin name.vst3"

10. if this is successful (it will tell you) ... you re done...and you can zip up and ship your plugin....