无法在钥匙串中安装iPhone开发人员证书

Question

So I looked everywhere and I have no idea how to solve this certificate problem. Basically, I am the team leader for the project. I have two computers - one one of them everything properly: I have the keys, certificates, etc. and I can install the app on any provisioned device.

Now, on my second computer I just can't get to install the dev certificate on keychain. Basically here is what I did:

1. Went to the provisioning portal and downloaded my certificate from Certificates --> Development (I am guessing that here I did not have to request a CSR again, since I have it already on the portal - right? Regardless, I can't see on the portal how I can request another one...)

2. Downloaded the WWDR certificate from the same page: Certificates --> Development

Now, it's weird cause when I double click on the certificate nothing happens on my keychain besides adding two keys - a private and a public under 'keys' but NOTHING under "My Certificate"

Also - when double clicking on developer_identiy.cer, nothing happens. Any ideas? I have literally tried everything...thanks!

Answer 1

You can't install a certificate on a different machine that the CSR (cert request) was generated from just from the certificate. The reason is this stuff is based on asymmetric cryptography, also called Public-key crypto. The machine you generated the CSR on created a Private key, and stored that in it's keychain, but sent it's public key along with the CSR. When Apple generates the cert, they use your public key in the creation of the Cert. In order for you to use that cert, the machine must have both your private and public keys in the keychain. You can export your public/private keys from the original machine and import them on your second computer, and then you'll be able to use your cert on both machines. Note: it's very important you keep your private key private - don't share it with other users, don't put it on a public file share. Loose that and you'll have trouble. Look under "Managing your digital identities" for instructions on how to backup & restore your key pair.

Answer 2

I forgot to highlight both the certificate AND private key in Keychain before clicking export. If I only highlighted one of them and exported, when the other developer double clicked the .p12 it wouldn't add to his Keychain.