ios Team Administration Guide (Legacy)

Transcription

1 ios Team Administration Guide (Legacy)

2 Contents About ios Development Team Administration 5 At a Glance 6 Team Admins Manage Team Membership and Assign Roles in the Member Center 6 Development Devices Must Be Registered in the ios Provisioning Portal 6 To Develop Apps, You Need a Development Certificate 6 To Install an App on a Development Device, You Need a Development Provisioning 6 To Distribute an App, You Need a Distribution Certificate and a Distribution Provisioning 7 Publish Your App to the App Store or Distribute on Your Own 7 How to Use This Document 7 Prerequisites 8 See Also 8 Managing Your Team 9 Development Team Roles and Responsibilities 9 Build Your Team by Adding Team Admins and Team Members 10 Managing Your Team s Membership Is an Ongoing Process 10 Designating ios Devices for Development and User Testing 11 Adding Individual Devices to Your Development Team 11 Bulk Upload of Devices 11 Removing Devices Does Not Restore Device Count 12 Editing Device Names on Your Development Team 12 Resetting Your Device List Each Membership Year 12 Managing Development Certificates 13 Approving a Team Member s Request for a Signing Certificate 14 Development Certificates Are Valid for One Year 14 Creating and Configuring App IDs 15 Use Wildcard App IDs for a Set of Apps 16 Use Explicit App IDs for APNS, In-App Purchase, icloud, and Game Center 16 Creating an App ID 16 Configuring Your App ID for Apple Push Notification Service 17 Configuring Your App ID for icloud 18 2

3 Contents Explicit App IDs Are Automatically Enabled for In-App Purchase and Game Center 18 Updating Your App to Include APNS, icloud, In-App Purchase, or Game Center Requires an Explicit App ID 19 Creating and Downloading Development Provisioning s 20 Creating a Development Provisioning 20 Downloading and Installing a Development Provisioning 21 Managing a Distribution Certificate 22 Using Xcode to Create a Distribution Certificate 22 Manually Managing a Distribution Certificate 23 Generating a Certificate Signing Request with Keychain Access 23 Submitting a Certificate Signing Request for Approval 24 Downloading and Installing Distribution Certificates 24 Distribution Certificates Must Be Renewed Periodically 24 Creating and Downloading a Distribution Provisioning 25 Creating a Distribution Provisioning 25 Downloading and Installing a Distribution Provisioning 25 Distributing an App 27 Publish Your App to the App Store 27 Ad Hoc Distribution Authorizes a Limited Set of Devices to Run Your App 28 In-House Distribution Allows Companies to Distribute Apps Internally 28 Document Revision History 29 Glossary 30 3

4 Figures Creating and Configuring App IDs 15 Figure 4-1 The Two Parts of an App ID, the Team ID and the Bundle ID Search String. 15 Figure 4-2 Examples of How to Format a Wildcard App ID. 16 4

5 About ios Development Team Administration Important This document has been replaced by App Distribution Guide. App Distribution Guide offers step-by-step instructions for configuring, testing, and submitting your app for approval. This new document describes how to use Xcode and other Apple developer tools to create and configure your project, request signing certificates, create provisioning profiles, configure special App Store technologies, test your app on devices, create your app record in itunes Connect, and submit your app for approval to Apple. If you have a company Apple Developer Program membership, you ll also learn how to manage your team s certificates and provisioning assets. ios app development is a mix of coding and administrative tasks. Often, a team works together to develop an app. However, a single developer can perform all of the necessary tasks. This document describes the administrative tasks and is required reading for the team admin. Each team should designate someone to act as their team s admin; an individual is automatically the team admin. The ios Provisioning Portal is where you, the team admin, manage certificates and create profiles for developing, testing, and distributing your app. You can also authorize ios devices for app development and testing. You are responsible for coordinating with your team. The steps in this guide are presented in a logical order for most development teams. The tasks are divided into two main phases: development and distribution. During the development phase, you create a development provisioning profile so that your team can run your app on ios devices specifically configured for development. It is important to test your app on actual devices, not just in the ios Simulator. In the distribution phase, you create a distribution provisioning profile for your team so that you can distribute your app. DEVELOPMENT & TESTING DISTRIBUTION Create Your Team Development Provisioning Distribution Provisioning Distribute Managing team members Device IDs ios Development Certificates ios Distribution Certificate App Store Ad hoc distribution In-house distribution 5

6 About ios Development Team Administration At a Glance At a Glance Team Admins Manage Team Membership and Assign Roles in the Member Center The team admin is responsible for managing the development team by adding new members and assigning team roles. A developer can be a team agent, team admin, or a team member. Each development team has one team agent who is the primary contact for the team. A team with more than one member is required to have at least two team admins (including the team agent). The team agent and team admins are responsible for the configuration and provisioning of an app. Relevant Chapter: Managing Your Team (page 9) Development Devices Must Be Registered in the ios Provisioning Portal To run an app on an ios device during the app s development stage, you must register the device in the ios Provisioning Portal by adding its device ID. This device must also be specified as a development device. Relevant Chapters: Designating ios Devices for Development and User Testing (page 11) To Develop Apps, You Need a Development Certificate In ios development, apps must be cryptographically signed before they can run on an ios device. Each team member who wants to develop an app needs to have his or her own authorized development certificate. A team member requests a development certificate using Xcode but it is not created until the team admin approve the request. Relevant Chapter: Managing Development Certificates (page 13) To Install an App on a Development Device, You Need a Development Provisioning To install an app on a device, you need three things: App ID that identifies the set of apps it authorizes to run. List of devices your team wants to use for testing. List of developers permitted to sign the app. 6

7 About ios Development Team Administration How to Use This Document These three things are bundled in a development provisioning profile. Relevant Chapters: Creating and Downloading Development Provisioning s (page 20) To Distribute an App, You Need a Distribution Certificate and a Distribution Provisioning When your app is ready for distribution, the team admin creates a distribution certificate that your team uses to sign your app. This certificate must be included in a distribution provisioning profile. Similar to a development provisioning profile, a distribution provisioning profile bundles together the things you need to distribute your app: an app ID and your team s distribution certificate. A distribution provisioning profile allows your app to run on nondevelopment ios devices. Relevant Chapters: Managing a Distribution Certificate (page 22) and Creating and Downloading a Distribution Provisioning (page 25) Publish Your App to the App Store or Distribute on Your Own You can submit your app to the App Store or distribute it to testers through ad hoc distribution. Or, if you are enrolled in the Enterprise Program, you can distribute your app in-house. Apps published in the App Store must go through the approval process before they are available to users. Relevant Chapter: Distributing an App (page 27) How to Use This Document This document is intended for both developers and nondevelopers. It is required reading for team admins (which includes the team agent). This guide does not require familiarity with Xcode or that you be involved in any of the app programming. If you have never used the ios Provisioning Portal before, you should read this document in its entirety, starting with Managing Your Team (page 9). If you have previously acted as your development team s agent or admin, use this guide as a checklist, referencing the relevant chapters to learn about specific tasks. 7

8 About ios Development Team Administration Prerequisites Prerequisites This guide assumes that you, or your company, are already registered in the ios Developer Program. If not, you can register at After you are registered, you have access to the Member Center and the ios Provisioning Portal. Before you read this guide, read Developing for the App Store to understand all the steps you must perform to develop and distribute your apps. See Also If you are an individual developer, who is not using any of the specialized technologies that require an explicit app ID, read this tutorial to get started: App Store Submission Tutorial teaches you the process of provisioning devices and submitting your ios app to the App Store. The following guides are intended for team members responsible for writing your app s code: App Distribution Guide explains how a team member obtains a development certificate and development provisioning profile using Xcode. Start Developing ios Apps Today (Retired) is the starting point for learning how to create apps. It describes fundamental app architecture, explains coding processes, and gives tips for designing your app. 8

9 Managing Your Team DEVELOPMENT & TESTING DISTRIBUTION Create Your Team Development Provisioning Distribution Provisioning Distribute Managing team members Device IDs ios Development Certificates ios Distribution Certificate App Store Ad hoc distribution In-house distribution If you have enrolled in the ios Developer Program as an individual, you are the team agent. You have access to all ios Provisioning Portal capabilities. However, as an individual, you cannot add any additional team members. If you have enrolled as a company in the ios Developer Program, you can set up a development team in the Member Center. Development Team Roles and Responsibilities A development team consists of individuals with the following roles: Team Agent There is only one team agent per development team. This person is the original enrollee accepted into the ios Developer Program. The team agent is the primary contact for the development team and is responsible for accepting all ios Developer Program agreements. The agent has access to all ios Provisioning Portal capabilities and has all of the privileges of a team admin and a team member. Team Admin All teams with multiple members require at least two team admins, including the team agent. There is no maximum for the number of team admins. Team admins have all of the same privileges as team agents except for signing legal agreements. Team admins are also team members. Team Member A development team can have as many team members as necessary. Team members can request development certificates and download development provisioning profiles. 9

10 Managing Your Team Build Your Team by Adding Team Admins and Team Members All individuals on a development team have the ability to test apps on ios devices. For more information about development team roles, see Understanding Membership Privileges. Build Your Team by Adding Team Admins and Team Members To add team admins and members... Managing Your Team s Membership Is an Ongoing Process During the development process, you may need to remove people from your team. To remove a member of your team, select the person you want to remove from the All People list in Member Center. Click Delete. To edit a team member's privileges... If you need to change your name or address, contact Apple Developer Support. If you need to designate a new team agent, the current team agent can request a change in the Member Center. To designate a new team agent 1. After logging in the Member Center, click Your Account in the bar at the top. 2. Click Organization in the sidebar. 3. Click Transfer Agent Role under Main Contact and click Continue. 4. Select a person from your team as the new team agent and click Continue. 5. After you agree to transfer your agent role, click I Agree, Continue. The new agent will receive an to accept the transfer. 10

11 Designating ios Devices for Development and User Testing DEVELOPMENT & TESTING DISTRIBUTION Create Your Team Development Provisioning Distribution Provisioning Distribute Managing team members Device IDs ios Development Certificates ios Distribution Certificate App Store Ad hoc distribution In-house distribution The Devices section of the ios Provisioning Portal allows you, as a team admin, to add the ios devices your team wants to use for development. Only team admins can add devices. A member who wants to add a device to the development team needs to send you the unique device ID (UDID). The device ID is a 40-character string that is tied to a single device. To locate the device ID, connect the device to your computer, select the device in the Devices organizer in Xcode, and copy the identifier. A team member can send you this string by the most convenient method: , IM, note, etc. You can add up to 100 devices to your development team each membership year. Adding Individual Devices to Your Development Team Before you can add a device to your team to use for development, you need the device ID. To add a device to your development team... In order for a device to be used for development testing, it also needs to be marked as a development device. See Provisioning Your Device for Generic Development for more information. Bulk Upload of Devices Instead of adding devices one at a time, you can add multiple devices at once by uploading a.deviceids file or a text file. 11

12 Designating ios Devices for Development and User Testing Removing Devices Does Not Restore Device Count To create a.deviceids file, use the iphone Configuration Utility. Connect each device you want to register to your computer and the utility saves the information for each device in the Devices section of the Library list. Then, select the devices you want to upload and click Export in the toolbar. Specify the file Export type as Device UDIDs. If you want to use a.txt file, create a tab-delimited file with one device ID and one device name in each row. The first row is ignored because it should contain only headers. When you have your file, navigate to the Devices section of the ios Provisioning Portal. Click Upload Devices and Choose File. Select the file you want to upload and submit it. Removing Devices Does Not Restore Device Count To remove a device from your development team, navigate to the Devices area of the ios Provisioning Portal. Select the devices you want to remove and click Remove Selected. Note: Removing a device from your development team invalidates all provisioning profiles containing that device. Affected provisioning profiles need to be renewed in order to be downloaded again. Removing devices does not restore the device slot immediately. However, any devices that were removed will have their device slot restored at the beginning of each membership year. Editing Device Names on Your Development Team Once a device is added, you can edit only the device name, not the device ID. To edit the name, navigate to the Devices area of the ios Provisioning Portal. Under Actions, click Edit for the device you want to edit. Resetting Your Device List Each Membership Year At the beginning of each new membership year (one year after your initial enrollment), team admins can restore the available device count to 100 devices. This option is presented to team admins when they first log in to the ios Provisioning Portal at the beginning of a new year. Remove all devices you no longer want before adding any new devices. Devices that are removed before adding the first new device for the year restores the device count; devices that are removed after do not. 12

13 Managing Development Certificates DEVELOPMENT & TESTING DISTRIBUTION Create Your Team Development Provisioning Distribution Provisioning Distribute Managing team members Device IDs ios Development Certificates ios Distribution Certificate App Store Ad hoc distribution In-house distribution Each team member that wants to run an app on a device during development must have his or her own authorized development certificate. This certificate is used to cryptographically sign an app. An app must be signed before it can run on an ios device. A team member can have only one active development certificate, but one certificate can be used in multiple apps. Development certificates are not created until the team admin approves a certificate request. To learn how to request a development certificate using Xcode, see Provisioning a Device for Development. The development certificate a developer requests includes a copy of his or her public key. The private key is saved in the developer s keychain when they make the certificate request. The public/private key pair and the development certificate are used to sign an app. A development certificate is restricted to development only and is valid for a limited time. The Apple Worldwide Developer Relations Certification Authority can also revoke a certificate before it expires. Important: The private key is saved (in the keychain) on the Mac that was used to request the certificate. Team members who want to enable code signing on a different Mac must transfer their developer profile as described in Safeguarding and Transferring Your Signing and Provisioning Assets. As a team admin, you have the authority and responsibility to approve or reject all development certificate requests made by your team. 13

14 Managing Development Certificates Approving a Team Member s Request for a Signing Certificate Approving a Team Member s Request for a Signing Certificate You are notified via when a team member requests a certificate. To approve or reject the request, navigate to the Certificates area of the ios Provisioning Portal. Select the certificate and click either Reject Selected or Approve Selected. The member who submitted the request is notified via . If the request is approved, the certificate is only available for download to the member who requested it. Development Certificates Are Valid for One Year Development certificates are valid for one year from date of issue. After a certificate expires, any apps that were signed with that certificate will no longer run on a device. To continue development, the developer requests a new development certificate. To learn how to request a development certificate, see Provisioning a Device for Development. 14

15 Creating and Configuring App IDs DEVELOPMENT & TESTING DISTRIBUTION Create Your Team Development Provisioning Distribution Provisioning Distribute Managing team members Device IDs ios Development Certificates ios Distribution Certificate App Store Ad hoc distribution In-house distribution An app ID is a string used to specify an app, or set of apps. An app ID s primary use is to specify which apps are authorized to be signed and launched. You can configure an app ID to share data between apps and enable an app to use Apple Push Notification Service (APNS), In-App Purchase, icloud, and Game Center. An app ID has two parts: the team ID followed by the bundle ID search string. The team ID is a 10-character string generated by Apple. Each development team is assigned a unique team ID used to identify all your apps. The team ID allows you to share keychain data between apps. Apps with the same team ID can share data, such as usernames and passwords. A bundle ID search string is traditionally a reverse-domain-name style string. It s the string you use in Xcode as the bundle ID. Figure 4-1 The Two Parts of an App ID, the Team ID and the Bundle ID Search String. Team ID (generated by Apple) A1B2C3D4E5 com domainname applicationname Bundle ID search string (determined by Developer) There are two types of app IDs that can be created: wildcard app IDs and explicit app IDs. The bundle ID search string determines the type of the app ID. The following sections provide a brief review of the types of IDs. For a detailed explanation, see Application Identifiers are Used to Match Applications to Services. 15

16 Creating and Configuring App IDs Use Wildcard App IDs for a Set of Apps Use Wildcard App IDs for a Set of Apps A wildcard app ID allows you to use a single app ID to build and install multiple apps. However, wildcard app IDs can t be used with APNS, In-App Purchase, icloud, or Game Center. Use a wildcard app ID when getting started with development because it can simplify provisioning devices. A wildcard app ID uses the asterisk character (*) in the bundle ID search string. The asterisk must be the last character in the bundle ID search string, such as com.domain.* or just *. In the bundle identifier field in Xcode, developers can replace the asterisk with any string, as long as it matches the wildcard pattern. For example, the app ID a1b2c3d4e5.com.domainname.* matches the bundle ID a1b2c3d4e5.com.domainname.myapp4. Figure 4-2 Examples of How to Format a Wildcard App ID. Team ID (generated by Apple) A1B2C3D4E5 * Bundle ID search string (determined by Developer) Team ID (generated by Apple) or, A1B2C3D4E5 com domainname * Bundle ID search string (determined by Developer) For your convenience, Xcode creates a wildcard app ID, called ios Wildcard App ID, that is set to *, and used by a development provisioning profile, called ios Team Provisioning, that it manages for you. Use Explicit App IDs for APNS, In-App Purchase, icloud, and Game Center Use an explicit app ID if you want to use APNS, In-App Purchase, icloud, and Game Center features. Because explicit app IDs match only one app, a separate ID and accompanying provisioning profile is required for each app. An explicit app ID uses a reverse-domain-name string that exactly matches the bundle ID in Xcode. Creating an App ID Only team agents or admins can create app IDs. To create an app ID 1. Navigate to the App IDs area of the ios Provisioning Portal and click New App ID in the upper right. 16

17 Creating and Configuring App IDs Configuring Your App ID for Apple Push Notification Service 2. Enter a name for the app ID under Description. This name is for your own use to identify the app ID. 3. Enter a bundle ID search string and click Submit After your app ID is generated, it is listed in the app IDs area of the ios Provisioning Portal under the name you gave it. Configuring Your App ID for Apple Push Notification Service To use Apple Push Notification Service (APNS), you need to configure your app ID and then create a new provisioning profile with the configured ID. To learn more about APNS, see Apple Push Notification Service. To enable your app ID for APNS 1. Navigate to the app IDs area of the ios Provisioning Portal. Any app IDs that are eligible for APNS have a yellow indicator light. Click Configure next to the app ID. 17

18 Creating and Configuring App IDs Configuring Your App ID for icloud Only explicit app IDs can be used; wildcard and duplicate app IDs are not eligible for APNS. 2. Select Enable for Apple Push Notification Service and then click Configure next to the appropriate SSL Certificate. A Client Authentication SSL Certificate is created for you. 3. Follow the instructions in the SSL Certificate Assistant. This procedure installs the private key and public SSL certificate on your notification server. Configuring Your App ID for icloud To use icloud, you need to configure your app ID and then create a new provisioning profile with the configured ID. To learn more about using icloud for your app, see icloud Storage. To enable your app ID for icloud 1. Navigate to the app IDs area of the ios Provisioning Portal. Any app IDs that are eligible for icloud have a yellow indicator light. Click Configure next to the app ID. Only explicit app IDs can be used; wildcard and duplicate app IDs are not eligible for icloud. 2. Select Enable for icloud and then click Done. Explicit App IDs Are Automatically Enabled for In-App Purchase and Game Center In-App Purchase allows users to purchase extra content from within your app. Game Center is Apple s social gaming network and allows you to implement features such as aliases, leaderboards, achievements, and matchmaking. To configure your app for In-App Purchase and Game Center, you need an explicit app ID. Explicit app IDs are automatically enabled for In-App Purchase and Game Center. For more information about configuring your app for In-App Purchase and Game Center see itunes Connect and the itunes Connect Developer Guide. 18

19 Creating and Configuring App IDs Updating Your App to Include APNS, icloud, In-App Purchase, or Game Center Requires an Explicit App ID Updating Your App to Include APNS, icloud, In-App Purchase, or Game Center Requires an Explicit App ID As you develop, you might want to add features to your app. To support APNS, icloud, In-App Purchase, or Game Center, you need an app signed with a provisioning profile that uses an explicit app ID. If you have an app that uses a wildcard app ID, you need to create a new app ID and then modify your provisioning profile. To update your app ID: 1. Identify your app s current bundle ID in Xcode or itunes Connect. 2. Create a new app ID in the App IDs area of the ios Provisioning Portal with your app s bundle ID search string. 3. Enable your app ID for APNS or icloud (see Configuring Your App ID for Apple Push Notification Service (page 17) or Configuring Your App ID for icloud (page 18)). Explicit app IDs are automatically enabled for In-App Purchase and Game Center. 4. Modify your provisioning profile to use the new explicit app ID. 19

20 Creating and Downloading Development Provisioning s DEVELOPMENT & TESTING DISTRIBUTION Create Your Team Development Provisioning Distribution Provisioning Distribute Managing team members Device IDs ios Development Certificates ios Distribution Certificate App Store Ad hoc distribution In-house distribution To install an app on a device during development, you need three things: an app ID that identifies the set of apps it authorizes to run, a list of devices your team wants to use for testing, and a list of developers permitted to sign the app. These three things are bundled in a development provisioning profile. A development provisioning profile uniquely ties developers and devices to a development team. A provisioning profile is valid for one year. A device can be added to multiple provisioning profiles. For your convenience, Xcode creates a wildcard app ID, called ios Wildcard App ID, that matches all your apps. The first time you register a device in Xcode, Xcode creates a development provisioning profile, called ios Team Provisioning, that uses the ios Wildcard App ID. Xcode automatically adds new developer certificates and registered device IDs to the ios Team Provisioning so you can use ios Team Provisioning for all apps that don t require an explicit app ID. Only team agents and admins can create development provisioning profiles. Creating a Development Provisioning To create a development provisioning profile... Each Provisioning has one app ID associated with it. If you have multiple apps using Apple Push Notification Service (APNS), In-App Purchase, icloud, or Game Center, create a separate development provisioning profile for each app. If you are installing multiple apps but you are not using those features, use a wildcard app ID. 20

21 Creating and Downloading Development Provisioning s Downloading and Installing a Development Provisioning Downloading and Installing a Development Provisioning To download a provisioning profile... If your development certificate is specified in the provisioning profile, it should show up automatically in the Devices organizer in Xcode after the provisioning profile is approved. If the provisioning profile isn t in the Provisioning list, click Refresh. For more information, including how to install a provisioning profile on your device, see Provisioning a Device for Development. In order to test an app, the development provisioning profile must be installed on both a Mac and the device. To install the provisioning profile manually on your Mac, drag the file onto the Xcode, itunes, or iphone Configuration Utility app icon. 21

22 Managing a Distribution Certificate DEVELOPMENT & TESTING DISTRIBUTION Create Your Team Development Provisioning Distribution Provisioning Distribute Managing team members Device IDs ios Development Certificates ios Distribution Certificate App Store Ad hoc distribution In-house distribution Before an app can be distributed, your team must have a valid distribution certificate linked to a distribution provisioning profile. Only team admins can create or install a distribution certificate. Each team can have only one active distribution certificate. The team admin can either use Xcode to create a distribution certificate or manually request and download one from ios Provisioning Portal. A team s distribution certificate allows a developer to build an app for distribution. If your team wants to use another Mac to create a distribution build, you need to transfer a copy of the distribution certificate as described in, Safeguarding and Transferring Your Signing and Provisioning Assets. Using Xcode to Create a Distribution Certificate You should use Xcode to create your distribution certificate. Xcode creates, downloads, and installs a development certificate, distribution certificate, and the ios Team Provisioning for you. Xcode can also restore missing certificates and renew expired certificates. To create a distribution certificate 1. In Xcode, open the Devices organizer. 2. Select Provisioning s in the Library section. 3. Click the Refresh button at the bottom of the window.. 4. Enter your user name and password and click Log in. After you log in to your account, a prompt appears, asking whether Xcode should request your distribution certificate. 22

23 Managing a Distribution Certificate Manually Managing a Distribution Certificate 5. Click Submit Request. 6. If a prompt appears, at the end of the refresh process, asking if you want to export your developer profile, click Export. Your request for a distribution certificate is automatically approved. The distribution certificate is added to your keychain and appears in Xcode. You can view, download, or revoke the distribution certificate in the ios Provisioning Portal. Important: Make sure you save your private and public keys somewhere secure. These keys are not stored anywhere else and if you lose your private key you cannot sign apps in Xcode, upload your app to the App Store, or install your app on an ios device. Manually Managing a Distribution Certificate Although it is easier to use Xcode to create a distribution certificate, you can manually create a distribution certificate. If you do not have access to Xcode, generate a Certificate Signing Request (CSR) with Keychain Access, submit your request, and download the certificate from the ios Provisioning Portal. Generating a Certificate Signing Request with Keychain Access To generate a Certificate Signing Request manually 1. Open Keychain Access on your Mac (located in Applications/Utilities). 2. Open Preferences and click Certificates. Make sure both Online Certificate Status Protocol and Certificate Revocation List are set to Off. 3. Choose Keychain Access > Certificate Assistant > Request a Certificate From a Certificate Authority. Note: If you have a private key selected when you do this, the CSR won t be accepted. Make sure no private key is selected. 4. Enter your user address and common name. Use the same address and name as you used to register in the ios Developer Program. No CA Address is required. 5. Select the options Saved to disk and Let me specify key pair information and click Continue. 6. Specify a filename and click Save. 7. For the Key Size choose 2048 bits and for Algorithm choose RSA. Click Continue and the Certificate Assistant creates a CSR and saves the file to your specified location. 23

24 Managing a Distribution Certificate Distribution Certificates Must Be Renewed Periodically Creating a CSR generates a public and private key pair. The private key is stored in the login keychain. Submitting a Certificate Signing Request for Approval 1. Navigate to the Certificates area of the ios Provisioning Portal and click the Distribution tab. Click Request Certificate. 2. Click Choose File, choose your CSR file, and click Submit. Note: If the Key Size was not set to 2048 bits, the CSR is rejected. After the CSR is approved, the certificate is listed under Current Distribution Certificate. If it doesn t appear automatically, you may need to refresh the page. Downloading and Installing Distribution Certificates 1. Navigate to the Certificates area of the ios Provisioning Portal and click the Distribution tab. Click Download next to the certificate. 2. In the Finder, double-click the downloaded.cer file to open Keychain Access and install your certificate in your default keychain (usually the login keychain). Distribution Certificates Must Be Renewed Periodically A distribution certificate is valid for one year from date of issue. After it expires, you won t be able sign and install apps on your devices although this will not affect any existing apps in the App Store. To continue distribution, navigate to the Devices organizer in Xcode. Select the expired profile and click Renew in the red bar at the top. This will renew your expired certificate and add it to the provisioning profile. After you get a new distribution certificate, you can submit new apps or app updates to the App Store. If you are enrolled in the ios Developer Enterprise Program, revoking your distribution certificate will make your app fail on any installed devices. Only revoke your certificate if your app or private key have been compromised. You can create a second distribution certificate six months before your existing certificate expires. The overlapping certificate allows you to continue to build and distribute your app once your first certificate expires. 24

25 Creating and Downloading a Distribution Provisioning DEVELOPMENT & TESTING DISTRIBUTION Create Your Team Development Provisioning Distribution Provisioning Distribute Managing team members Device IDs ios Development Certificates ios Distribution Certificate App Store Ad hoc distribution In-house distribution To distribute an app, a team admin must create a distribution provisioning profile (this profile is different from a Development Provisioning ). The distribution provisioning profile consists of a name, a distribution certificate, and an app ID. The name is used only so that you can identify a provisioning profile. A provisioning profile is valid for one year. Apps can be distributed either through the App Store with an itunes Connect account or through ad hoc distribution. If you are enrolled in the Enterprise Program, you can also use in-house distribution. For more on distribution methods see Distributing an App (page 27). To publish an app to the App Store, create a distribution provisioning profile specifying App Store as the distribution method. To use ad hoc distribution, create a distribution provisioning profile specifying Ad Hoc as the distribution method and include a list of up to 100 devices authorized to run the app. To use in-house distribution, create a provisioning profile specifying In-House as the distribution method. Creating a Distribution Provisioning To create a distribution provisioning profile... Downloading and Installing a Distribution Provisioning To download a provisioning profile... 25

26 Creating and Downloading a Distribution Provisioning Downloading and Installing a Distribution Provisioning To install the provisioning profile on your Mac, drag the.mobileprovision file onto the Xcode, iphone Configuration Utility, or itunes icon in the Dock. 26

27 Distributing an App DEVELOPMENT & TESTING DISTRIBUTION Create Your Team Development Provisioning Distribution Provisioning Distribute Managing team members Device IDs ios Development Certificates ios Distribution Certificate App Store Ad hoc distribution In-house distribution If your development team is enrolled in the Standard Program, you can distribute your app in two ways. You can submit an app to the App Store or you can use ad hoc distribution to install the app on up to 100 devices for testing purposes. Development teams enrolled in the Enterprise Program can also use in-house distribution. Development teams enrolled in the University Program do not have the ability to distribute apps. Publish Your App to the App Store To distribute your app through the App Store, you need to: 1. Download your team s distribution provisioning profile from the ios Provisioning Portal. 2. Create an itunes Connect account. When you register for itunes Connect, make sure to use the same user name and password used for your ios Developer Program account. 3. Prepare your app for submission, see Submitting Your Application for Publication on the App Store. 27

28 Distributing an App Ad Hoc Distribution Authorizes a Limited Set of Devices to Run Your App Ad Hoc Distribution Authorizes a Limited Set of Devices to Run Your App ios developers enrolled in the Standard Program can also distribute an app outside of the App Store on up to 100 different devices for testing purposes only. To use ad hoc distribution, create an archive of your app, or have a teammate send you an ios App Store Package (.ipa) of the archived app. You distribute your app by providing the.ipa file for users to install on their devices. Because you select a valid ad hoc provisioning profile to archive the app, users don t need to install the profile on their device, only the.ipa file. Users can use itunes to install the app on their devices. If users want to use Xcode to install the app on their device, share the archive as an.xcarchive file package. In-House Distribution Allows Companies to Distribute Apps Internally ios developers enrolled in the Enterprise Program can distribute in-house without identifying individual devices or using the App Store. To distribute your app in-house, create an archive of your app, or have a teammate send you an archived app. Distribute your internal app using your company s authorized software distribution mechanism. Because the app file can be installed on any ios device, make sure you protect the distribution of this file. Members of your company can use itunes, iphone Configuration Utility, or Xcode to install the app on their devices. 28

29 Document Revision History This table describes the changes to ios Team Administration Guide. Date Notes Replaced by App Distribution Guide and moved to Retired Documents Library Made available in PDF Updated artwork to show that the app ID prefix is always the team ID Update for Xcode Updated information about using Automatic Device Provisioning in Xcode New document that describes how ios team agents and team admins use the ios Provisioning Portal. 29

30 Glossary The glossary defines terms used in the ios Developer Program: app ID A unique digital fingerprint that ios uses to grant your app access to a portion of the keychain and one part of a development and distribution provisioning profile. development provisioning profile A set of entities and entitlements allowing apps to be installed and tested on an ios device. A development provisioning profile consists of a name, a list of development certificates, a list of device IDs, and an app ID. development team A development team is a either a single person enrolled in the Individual Program or a team agent and group of team admins and team members in the Standard Program. distribution provisioning profile A set of entities and entitlements allowing apps to be distributed. A distribution provisioning profile consists of a name, a distribution certificate, and an app ID. development certificate An electronic document that associates a digital identity with other information, including a name, address, or business. A development certificate is restricted to app development only and is valid for a limited amount of time. itunes Connect A suite of web-based tools created for developers to submit and manage their apps for sale via the App Store. ios device An Apple device that runs ios. team agent The original person accepted into the ios Developer Program for all membership types. The team agent has access to all functionality in the ios Developer Program and is responsible for accepting all ios Developer Program agreements. team admin A person on a development team designated by the team agent or another team admin who has all of the same privileges as team agents except for signing legal agreements. team member A person on a development team who can request development certificates and install apps on a device. unique device ID (UDID) A 40-character string used to identify a specific Apple device. Xcode Apple's development environment for Mac OS X and ios; it includes all the tools needed to create, debug, and optimize Mac OS X and ios apps. distribution certificate An electronic document that associates a digital identity with other information, including a name, address, or business. A distribution certificate is restricted to app distribution only and is valid for a limited amount of time. 30

31 Apple Inc. Copyright 2013 Apple Inc. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, mechanical, electronic, photocopying, recording, or otherwise, without prior written permission of Apple Inc., with the following exceptions: Any person is hereby authorized to store documentation on a single computer or device for personal use only and to print copies of documentation for personal use provided that the documentation contains Apple s copyright notice. No licenses, express or implied, are granted with respect to any of the technology described in this document. Apple retains all intellectual property rights associated with the technology described in this document. This document is intended to assist application developers to develop applications only for Apple-branded products. Apple Inc. 1 Infinite Loop Cupertino, CA Apple, the Apple logo, Finder, iphone, itunes, Keychain, Mac, Mac OS, OS X, and Xcode are trademarks of Apple Inc., registered in the U.S. and other countries. icloud is a service mark of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc. IOS is a trademark or registered trademark of Cisco in the U.S. and other countries and is used under license. APPLE MAKES NO WARRANTY OR REPRESENTATION, EITHER EXPRESS OR IMPLIED, WITH RESPECT TO THIS DOCUMENT, ITS QUALITY, ACCURACY, MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE. AS A RESULT, THIS DOCUMENT IS PROVIDED AS IS, AND YOU, THE READER, ARE ASSUMING THE ENTIRE RISK AS TO ITS QUALITY AND ACCURACY. IN NO EVENT WILL APPLE BE LIABLE FOR DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES RESULTING FROM ANY DEFECT, ERROR OR INACCURACY IN THIS DOCUMENT, even if advised of the possibility of such damages. Some jurisdictions do not allow the exclusion of implied warranties or liability, so the above exclusion may not apply to you.