Apple team ID, code sign but ask for security to open the plugin

[Yannrog]

Hi,

I have an apple team Id, I have code signed the plugin, And code signed the installer but it ask for security when launch the installer.

Is there someone who can help me?

[dannytaurus]

@Yannrog Where did you use the Apple Team ID?

I don't think it's needed for regular VST/AU exports, only for iOS exports (which are no longer supported).

How are you code-signing the plugin and the installer? Are you using an app, like Packages or Package Builder? Or are you using the command line?

[AchimR]

You can use this terminal command to check your signing:

codesign -vvv --deep --strict "Your Plugin.vst3" && spctl --assess -vv --type install "Your Plugin.vst3" 

If the output doesn't say 'accepted', something went wrong with the signing or notarization process.

[David Healey]

@Yannrog Did you notarize it?

This workshop might be helpful for you: https://audiodevschool.com/courses/packaging-for-macos/

[Yannrog]

@David-Healey Hi, I don't know what is notarize,

I will check

[Yannrog]

@dannytaurus When I put VST and AU, the plugin is not seen and is seeing as a potential malware.

I use Packages and I use “add a certificate“

[Yannrog]

@AchimR Ok,

I will check

[Lindon]

@Yannrog said in Apple team ID, code sign but ask for security to open the plugin:

@David-Healey Hi, I don't know what is notarize,

I will check

if its not notarized its not going to load....

[Oli Ullmann]

@Yannrog
You must codesign your plug-in files.
And you must codesign, notarize, and staple your installer.

Here are the commands I use. Of course, you'll need to enter your own data. For the commands to work, the files must always be on your desktop.

// AU Component (Sign)
codesign -s "Developer ID Application: YOUR NAME (YOUR CODE)" "/Users/YOUR_USERNAME/Desktop/YOUR_PLUGIN.component" --timestamp

// VST3 (Sign)
codesign -s "Developer ID Application: YOUR NAME (YOUR CODE)" "/Users/YOUR_USERNAME/Desktop/YOUR_PLUGIN.vst3" --timestamp

// Installer (Sign)
codesign --deep --force --options runtime --sign "Developer ID Application: YOUR NAME (YOUR CODE)" "/Users/YOUR_USERNAME/Desktop/YOUR_INSTALLER.pkg"

// Installer (Notarization)
xcrun notarytool submit --apple-id "YOUR_MAIL_ADRESS" --password "YOUR_PASSWORD"  --team-id "YOUR_CODE" --wait "/Users/YOUR_USERNAME/Desktop/YOUR_INSTALLER.pkg"

// Installer (Staple)
xcrun stapler staple "/Users/YOUR_USERNAME/Desktop/YOUR_INSTALLER.pkg"

This article is very helpful, and it allowed me to set up my system:
https://www.kvraudio.com/forum/viewtopic.php?t=531663

This article is also very helpful if you run into any problems:
https://developer.apple.com/documentation/security/resolving-common-notarization-issues

[Yannrog]

@Lindon ok,

I'm a true newbie, so I will learn. thank you for your advices

[Yannrog]

@Oli-Ullmann Ok,

Thank you