ERROR ITMS-90164/90046: Invalid Code Signing Entitlements

Question

Note: I'm developing using Xamarin. Similar question posted in Xamarin Forum here

I'm creating an app called, say CompanyApp. Then I created an App ID for it com.Company.CompanyApp, along with Distribution Provisioning Profile that uses the corresponding App ID. I uploaded the binary and it worked perfectly fine.

Then I went on create a demo version of the app (basically the same app with small modification, so it's the same solution & project, just different bundle signing setting), CompanyAppDemo with a new App ID com.Company.CompanyAppDemo, along with a new Distribution Provisioning Profile that uses the new App ID. I updated the iOS Bundle Signing options to use the new Provisioning Profile and generated the IPA. But when I uploaded this to Application Loader, I got the following error:

[2015-01-23 16:08:21 SGT] ERROR: ERROR ITMS-90164: "Invalid Code Signing Entitlements. The entitlements in your app bundle signature do not match the ones that are contained in the provisioning profile. According to the provisioning profile, the bundle contains a key value that is not allowed: 'TEAMID.com.Company.CompanyApp' for the key 'application-identifier' in 'Payload/CompanyApp.app/CompanyApp'"

[2015-01-23 16:08:21 SGT] ERROR: ERROR ITMS-90046: "Invalid Code Signing Entitlements. Your application bundle's signature contains code signing entitlements that are not supported on iOS. Specifically, value 'TEAMID.com.Company.CompanyApp' for key 'application-identifier' in 'Payload/CompanyApp.app/CompanyApp' is not supported. This value should be a string starting with your TEAMID, followed by a dot '.', followed by the bundle identifier."

I have been debugging for days to figure out to no avail.

I am wondering why when I signed with the new profile, the error that Application Loader threw refer to the ID of the original TEAMID.com.Company.CompanyApp instead of TEAMID.com.Company.CompanyAppDemo? Is this a bug in Xamarin that pick up a wrong provisioning profile or am I missing something? You don't need different certificate for different app right?

Note that I have always refreshed the Provisioning Profile list in XCode > Preference before changing the iOS Build Signing option in Xamarin.

score 133 · Answer 1 · edited Dec 09 '17 at 00:06

133

If someone gets here by searching for ERROR ITMS-90046 like me, my solution was to Clean it and delete all precompiled frameworks (the custom ones) and then build again.

Note: The error description said something about key "aps-environment" as "development".

edited Dec 09 '17 at 00:06

Dan Beaulieu

17,926
15
92
126

answered Mar 13 '15 at 13:44

quarac

3,354
2
19
24

can you explain this a bit more? – John May 01 '15 at 22:36
1

Yes, in my app I'm using custom frameworks, they are added in the "build phases" "target dependencies" section, so when I compile the app, they are compiled and also signed. Also I have a script in each framework "build phases" that moves the compiled framework to another folder. There seems to be a bug with the signing process and I think the key part was the deletion of the frameworks, forcing the compiler to compile and sign them again. That error never happen again. – quarac May 02 '15 at 01:46
This worked, I just cleaned it and compiled again and didn't change anything, why it failed the first time? Mystery – rr1g0 Jun 26 '15 at 01:01
Same problem here and same fix ! You saved me a strong headache ! Lot of thanks. – stefat Oct 09 '15 at 16:26
7

All I had to do was do the Clean...This was a new error after about 50 builds uploaded to TestFlight – Phamer Oct 28 '15 at 22:55

score 63 · Answer 2 · answered Mar 03 '16 at 15:58

63

I had the same problem and solved with a simple Product -> Clean.

answered Mar 03 '16 at 15:58

David P

993
8
17

1

thanks worked for me to solve ERROR ITMS-90164: "Invalid Code Signing Entitlements. The entitlements in your app bundle signature do not match the ones that are contained in the provisioning profile. According to the provisioning profile, the bundle contains a key value that is not allowed: 'true' for the key 'get-task-allow' in 'Payload/Palau Moja.app/Palau Moja'" ERROR ITMS-90164: "Invalid Code Signing Entitlements. The entitlements in your app bundle signature do not match the ones that are contained in the provisioning profile. – Josep Escobar May 23 '16 at 14:46
Had the same error as Josep and clean -> archive -> upload again solve it. Thanks for posting this solution! – little Dec 30 '16 at 21:24
Where do you do *Product->Clean*? In XCode or Visual Studio? I'm developing using Xamarin, BTW. – James Lavery Nov 13 '18 at 11:11

score 20 · Answer 3 · answered Jun 14 '16 at 23:00

If someone gets here by searching for both error ITMS-90164 and error ITMS-90046 with get-task-allow and asp-environment keys:

Like David P said, a Product -> Clean before a new Archive did solve my problem.

I just want to add that in my case I observed that the faulty xarchive was missing the following file:

Before sending that .xarchive to your client for production signature, you might want to look for the archived-expanded-entitlements.xcent file and be sure it's there.

score 18 · Accepted Answer · answered Jan 27 '15 at 06:43

Finally after 2 weeks of hair pulling..

For some reasons, if there is no key 'application-identifier' in the Entitlements.plist that is set to TEAMID.com.Company.CompanyAppDemo, Xamarin will use the original application-identifier, i.e. TEAMID.com.Company.CompanyApp

So the solution was to add application-identifier specifying the correct application bundle ID inside Entitlements.plist. Then include the plist in the Build Options > iOS Bundle Signing.

xamarin is such a productivity boost! – Anton Tropashko May 25 '16 at 09:34 — Anton Tropashko, May 25 '16 at 09:34

score 10 · Answer 5 · answered May 09 '18 at 19:02

10

Change this in Entitlements.plist:

<key>aps-environment</key>
<string>development</string>

To this:

<key>aps-environment</key>
<string>production</string>

answered May 09 '18 at 19:02

KalleP

279
2
13

score 8 · Answer 6 · answered Jun 27 '16 at 12:03

8

Same problem and solved with a simple Product -> Clean.

answered Jun 27 '16 at 12:03

Adrien Brecheteau

220
3
5

score 5 · Answer 7 · answered Sep 22 '16 at 09:41

5

This can also be caused by you having to agree to a new contract in iTunes connect. Log in to iTunes connect and you should see a banner at the top prompting you to agree to the latest contract change.

answered Sep 22 '16 at 09:41

RickiG

11,280
13
78
120

1

Your'e a life saver :) Gotta love apple's unrelated error messages – Yoav Schwartz Sep 28 '16 at 14:46

score 5 · Answer 8 · answered Jan 14 '21 at 13:01

5

The entitlement file had empty arrays, removing those solved the issue.

answered Jan 14 '21 at 13:01

7RedBits.com

148
2
3

This did the trick for me – Kubee Jan 14 '21 at 22:49
Did the trick for me too! – David H Jan 20 '21 at 00:34

score 4 · Answer 9 · answered Apr 03 '17 at 11:29

4

For me, the problem was a Entitlements.plist that was auto-added and was empty. Removed it from the Custom entitlements field and solved the problem.

answered Apr 03 '17 at 11:29

Cássio

171
2
8

score 3 · Answer 10 · edited Feb 17 '16 at 06:40

3

If you do not select the corresponding release certificate before you pack, ERROR ITMS-90164 will be reported

Build Setting -> the Code Signing Identity -> Release ->Any IOS SDK

edited Feb 17 '16 at 06:40

bummi

26,435
13
58
97

answered Feb 17 '16 at 05:48

user5938649

31
2

score 2 · Answer 11 · answered Apr 07 '16 at 12:00

2

Make sure you have selected the App target and not the WatchKit App when archiving.

answered Apr 07 '16 at 12:00

Ric Santos

13,489
4
35
65

score 2 · Answer 12 · answered Feb 17 '17 at 02:55

None of the other answers solved this error for me, but this did:

Create new XCode application and go examine it's code signing settings.
Try to get your app to be set similarly to the default XCode 7 or Xcode 8 signing and provisioning settings, XCode 7 is shown here, it's changed again in XCode 8.

If the above is not enough, you may need to do it again, but this time, before you do, delete any old expired provisioning profiles from your apple Keyring or delete and re-sign into your apple developer (itunes) account in the XCode preferences. Be sure to EXIT XCODE and RESTART after ANY changes. Then add your account again, and let XCode fetch your new signing and team information.

score 1 · Answer 13 · answered Jan 24 '16 at 03:49

1

I had tried to upload a build from a git branch that wasn't the master. To resolve the issue I merged the branch into the master and built again. I was then able to upload the build successfully.

answered Jan 24 '16 at 03:49

Kurt Anderson

922
1
10
26

score 1 · Answer 14 · answered Sep 19 '16 at 08:49

1

A project including 2 targets(with 2 Developer id ,2 entitlements) may lead to this. (Do not ask me how it is happened...)

When archiving, remove another entitlement file temporarily.

answered Sep 19 '16 at 08:49

hstdt

3,693
22
26

score 1 · Answer 15 · answered Nov 16 '16 at 20:49

1

Doing a proper Xcode 'Quit' and then restart was the final action that got it working for me.

I had changed the bundle identifier (for a demo version) and got the same error (as detailed in the question) when verifying my archived build. I am using Xcode. Just closing Xcode and reopening my project wasn't enough, but a full 'Quit' was. Something was probably cached somewhere I'm guessing.

answered Nov 16 '16 at 20:49

Marcus

201
2
5

This did it for me. XCode can be so finicky sometimes. – Aaron Krauss Mar 23 '17 at 15:26

score 1 · Answer 16 · edited Dec 12 '16 at 11:13

1

I tried everything listed here, turned out the problem was my .entitlement file, that had lines I never put in in the first place, they just got added somehow.
Removed those lines and tried again, worked.

edited Dec 12 '16 at 11:13

DimaSan

10,315
10
56
68

answered Dec 12 '16 at 10:11

Nolan.K

57
1
2
9

score 1 · Answer 17 · answered May 24 '17 at 13:42

1

I have just renamed in entitlements.plist the value of Access domains from applinks:htts://domain.app.link to applinks:domain.app.link it works like a charm. Cheers!

answered May 24 '17 at 13:42

Sathish

388
1
5
19

score 0 · Answer 18 · answered Feb 16 '16 at 13:40

0

Go to Build Phase in Xcode
Remove all the frameworks
Add them back
Now build->Archieve->Upload to App Store

Hurray, You are done with it. Problem solved

answered Feb 16 '16 at 13:40

Mehul Thakkar

11,971
8
50
74

score 0 · Answer 19 · answered Oct 31 '16 at 01:21

0

For me, I was able to solve it by turning off / on again the automatic code signing feature:

answered Oct 31 '16 at 01:21

Dave G

10,974
7
49
74

score 0 · Answer 20 · answered Jan 12 '17 at 17:41

0

For me I had the wrong file in my Custom Entitlements setting under iOS Bundle Signing. Removed it and it worked!

answered Jan 12 '17 at 17:41

JP Hochbaum

577
2
13
28

1

Screenshot would be nice. – Warren P Feb 17 '17 at 02:56

score 0 · Answer 21 · answered Feb 23 '17 at 15:55

0

After many hours of investigation, i found an easy solution.

Instead of using the application loader to upload the application, I used the Organizer from XCode and it worked without any warnings when doing the upload!

answered Feb 23 '17 at 15:55

Sebastien Filion

94
1
5

score 0 · Answer 22 · answered Mar 28 '18 at 01:01

0

My problem is I was using a wrong bundle to create IPA file

answered Mar 28 '18 at 01:01

Netero

3,581
2
27
28

score 0 · Answer 23 · answered May 30 '18 at 08:42

I had exactly the same problem and it was quite a stupid mistake. I don't want anyone to spend time on this, so for this one:

So what happened here, was that i entered '10' in the deployment target. That should have been 10.0 instead. That is what produced the infamous ERROR ITMS-90164/90046: Invalid Code Signing Entitlements for me!

Rajesh Gaddam · Answer 24 · 2019-04-17T02:58:06.960

0

You should check your Entitlements. It is like plist file. Edit it to development and the remove the extra fields.

enter image description here

edited Apr 17 '19 at 02:58

answered Apr 17 '19 at 02:42

Rajesh Gaddam

1
3

score 0 · Answer 25 · answered Jul 25 '19 at 06:53

My two cents here.

Just now I stuck in this problem because when I copy my TeamID / Application ID from the apple developer portal which brings a lot of unrelated value to the entitlement.plist. I didn't notice this because I was using Xcode to edit the entitlement.plist and the input box will not display everything after the first new line character.

I suggest using plain text editor for entitlement.plist for this case.

Thanks, Samuel

score 0 · Answer 26 · answered Sep 05 '19 at 09:55

After trying all tricks read last days at Stackoverflow i delete file "xxxxxx.entitlements" and regenerate it again. I click at Capabilities, select ON at Associated Domains and adding "Domains". Then at Capabilities > Push Notifications click on Fix "Add the Push Notifications entitlement to your entitlement file".

Making that let me do ARCHIVE Successful

score 0 · Answer 27 · answered Feb 02 '20 at 17:38

0

I had a link like this webcredentials:https://************.link, which was causing my upload to fail. I removed it and the problem was solved.

answered Feb 02 '20 at 17:38

Septronic

1,070
12
29

ERROR ITMS-90164/90046: Invalid Code Signing Entitlements

27 Answers27

Linked