iOS Signing

Mac Users
Windows Users

Note: it is Phonegap Build's policy not to retrieve signing keys for users, for legal reasons. Hold on to them.


Mac Users

Convert the iPhone developer certificate to a P12 file on Mac OS

You'll first need to obtain an Apple Developer Certificate. See apple documenation for this.

Next you'll export it to the P12 keystore format. To do this on Mac® OS:

  1. Open the Keychain Access application (in the Applications/Utilities folder).
  2. If you have not already added the certificate to Keychain, select File > Import. Then navigate to the certificate file (the .cer file) you obtained from Apple.
  3. Select the Keys category in Keychain Access.
  4. Select the private key associated with your iPhone Development Certificate. The private key is identified by the iPhone Developer: public certificate that is paired with it.
  5. Command-click the iPhone Developer certificate and select, Export "iPhone Developer: Name...". Keychain export
  6. Save your keystore in the Personal Information Exchange (.p12) file format.
  7. You will be prompted to create a password that is used when you use the keystore to sign applications or transfer the key and certificate in this keystore to another keystore. keychain password

Windows Users

Convert an Apple developer certificate to a P12 file on Windows

Generate a certificate signing request:

openssl req -nodes -newkey rsa:2048 -keyout private_key.key -out cer_sign_request.csr

Upload that csr file to the Apple Developer Center and it will spit out a certificate (.cer).

To develop apps via Build, you must use a P12 certificate file. You generate this certificate based on the Apple iPhone developer certificate file you receive from Apple.

  1. Download and install OpenSSL

  2. Convert the developer certificate file you receive from Apple into a PEM certificate file. To do this, run the following command-line statement from the OpenSSL bin directory:

openssl x509 -in developer_identity.cer -inform DER -out developer_identity.pem -outform PEM

  1. If you are using the private key from the keychain on a Mac computer, convert it into a PEM key:

openssl pkcs12 -nocerts -in mykey.p12 -out mykey.pem

  1. You can now generate a valid P12 file, based on the key and the PEM version of the iPhone developer certificate:

openssl pkcs12 -export -inkey mykey.key -in developer_identity.pem -out iphone_dev.p12

Register devices

  1. Visit Apple Developer Portal.
  2. Go to Device section. Under Manage tab, provide Device Name and Device ID (40 hex characters)

Create Provisioning Profile

  1. Visit Apple Developer Portal.
  2. Go to Provisioning section. Create new profile under Development tab.
  3. Fill the form with Profile Name, Certificates (as per .cer above), App ID and your development device.

Submit to Build

Go to your Account > Edit Setting > Signing Keys' tab:

Edit Account

Click 'add a key...' and supply your previously generated p12:

Add Key

Unlocking the key.

Go to your Account > Edit Setting > Signing Keys' tab:

Edit Account

Click 'lock' button and supply the certificate password you used to export your cert.

Unlock key