Xcode 7 error: "Missing iOS Distribution signing identity for ..."

Question

I tried to upload my App to iTunes Connect resp. AppStore and got the following error:

Failed to locate or generate matching signing assets

Xcode attempted to locate or generate matching signing assets and failed to do so because of the following issues.

Missing iOS Distribution signing identity for ... Xcode can request one for you.

Before I set up a new development machine, exported the developer accounts via Xcode 7 from the old to the new machine.

What can I do to fix this?

Answer 1

I also faced the same issue today. The following steps fixed my issue.

1. Download https://developer.apple.com/certificationauthority/AppleWWDRCA.cer
2. Double-click to install to Keychain.
3. Then in Keychain, Select View -> "Show Expired Certificates" in Keychain app.
4. It will list all the expired certifcates.
5. Delete "Apple Worldwide Developer Relations Certificate Authority certificates" from "login" tab
6. And also delete it from "System" tab.

Now you are ready go.

Answer 2

From Apple -

Thanks for bringing this to the attention of the community and apologies for the issues you’ve been having. This issue stems from having a copy of the expired WWDR Intermediate certificate in both your System and Login keychains. To resolve the issue, you should first download and install the new WWDR intermediate certificate (by double-clicking on the file). Next, in the Keychain Access application, select the System keychain. Make sure to select “Show Expired Certificates” in the View menu and then delete the expired version of the Apple Worldwide Developer Relations Certificate Authority Intermediate certificate (expired on February 14, 2016). Your certificates should now appear as valid in Keychain Access and be available to Xcode for submissions to the App Store.

As noted in a comment below, the expired certificate also needs to be removed from the login section, as well:

To all that cannot get it working despite the instructions... There are two expired WWDR certs. One is in login keychain, and the other one is in the System. You have to delete both of them in order to make things working

Answer 3

I kept running into the issue and saw that all my certs were invalidated -- oh no!

It turns out I never deleted the expired cert. It was not showing up for me, until I selected from Keychain Access application:

View->Show Expired Certificates

then

System->All Items

will finally display that gnarly expired cert. Delete that and retry from XCode will pick up the new valid certs.

Just make sure you search "All Items" in the Keychain Access app. The invalidated certs are a result of pointing to the expired certificate that has not been deleted yet.