Prepare for Developer ID Certification Authority Expiration
Certificates expiring February 1, 2027, require updates to avoid installation issues.
Starting February 1, 2027, installer packages (.pkg) signed with certificates from the original Developer ID Certification Authority (Sub-CA) will no longer install. Developers should verify their certificates in the Certificates, Identifiers & Profiles section to check for expirations on or before this date.
To maintain software distribution, generate a replacement certificate from the current Developer ID Certification Authority (G2). If you are using Xcode 11.4 or earlier, update your software before creating the new certificate. When prompted for a Developer ID Certificate Intermediary, choose G2 Sub-CA; any other choice can issue a certificate that also expires in 2027. Re-sign all .pkg installers with the new certificate before February 1, 2027.
Previously signed and notarized Mac software with a secure timestamp will continue to function without requiring any action. For further details, refer to the Apple Developer News.
Sources
- Upcoming expiration of Developer ID Certification Authority (Sub-CA) Primary Apple Developer News
Researched and drafted with AI assistance from the primary sources listed above, then checked against those sources before publication. Every factual claim here is traceable to a cited source; where the sources are silent, so are we. How this works.