I'm using the latest XCode (6.1) and I need to submit the app as soon as possible, but I can't seem to get around the "Your account already has a valid iOS distribution certificate" error.
I have the client's provisioning profile and I have his distribution certificate (which is valid) and his private key (I've checked using Keychain, it's definitely there). The bundle ID is also correct. I've deleted my provisioning profiles and certificates and reinstalled the client's many times now.
What could be causing this issue? I've seen a lot of topics here on SO with this problem, so I apologise beforehand for creating yet another clone, but I really don't know how to fix this.
edit: I'm running a brand new install of Yosemite by the way
Got it solved by editing the iOS Distribution Provision Profile in the Developer Member Center.
For some reason there were 2 certificates to choose from for the Distribution Provisioning Profile. I switched over to the other certificate and I could Validate and Submit my Archive build for beta testing.
So, you may have more than one certificate for signing your Provision profiles. Make sure you have the right one (by trying all of them) and hopefully that should work.
I tried many things like Exporting Developer profile from Xcode Accounts and importing it in the organizer, installing the provision profiles from the member center, adding them to my keychain. But none of those worked. It started working only after editing the appropriate Provisioning Profile manually.
You could also trying removing all your available Provisioning Profiles and let Xcode create new ones for you. This will work too.
I also had this issue, which turned out to be caused by an attempt to export for ad hoc deployment using a development provisioning profile instead of a distribution profile. It seems this is no longer supported in Xcode 6.1. Once I created an ad hoc profile and installed that the problem went away. A more useful error message would have saved me hours of work and would be greatly appreciated, Apple.
This thread was helpful:
xcode 6 beta 2 issue with exporting ipa "Your account already has a valid iOS distribution certificate"
Besides all the other answers, there's one more possibility after 2/15/2016: the old World Wide certificate expired and I guess everyone has already downloaded the new cert (or check this out). However, you'll be seeing this error if you haven't remove the expired one. You may need to choose View -> Show Expired Certificates to unhide expired certs. If the error is still there, try regenerate provisioning profile as advised by the others.
I was moving to new Mac when I faced this issue.
On your older Mac:
Go Preferences > Accounts > Select Account > Details.
In the dropdown right click on iOS Distribution (or whatever is the name of your distribution certificate).
Export...
Set a password for the .p12 file.
Move and install this .p12 in the new mac.
Try Again.
Another possible cause for the problem (at least in my case) was that in my Keychain Access, I had two certificates for the team I was working with. One was expired, and the other one was the one I wanted to use. Deleting the expired certificate in Keychain Access solved the issue.
I ran into this problem, and I wanted to avoid screwing up my push notifications.
The easy fix for me was to just go to developer.apple.com > project > certifications, ids, and profiles > profiles > create a new profile (for development or distribution)
Download the created profile, drag and drop the profile over the Xcode icon, and then in your project target, set the new profile as the provisioning profile.
This fixed my problem--it may provide further help in the future.
The error message could mean that you need to get the Distribution certificate and private key from the developer who created them.
This can happen if some other team member has pressed the enticing "Reset" button (which means revoke certificate and create a new one).
Here is a picture what the revoked certificate looks like:
You can export the valid certificate from the developer who created
it and import it to other team members keychains.
Go to "Keychain Access" app.
Click on the "Login" in the top left box
Click on the "Certificates" on the bottom left box
Check which team member has the valid certificate:
when clicking on the "iPhone Distribution" certificate
everyone else sees "This certificate is revoked" in red at the top.
(Maybe backup the deleted certificate to avoid doing anything irreversible)
delete the revoked certificates
Export the one valid certificate and distribute to team
Import the certificate file for everyone else
Today I was solve problem by delete from keychain old certificate Apple Worldwide Developer Relations Certification Authority and install new one (exp. in 2023)
I'll add to here because while the accepted answer got me on the right track it wasn't the solution. There was a second (automatically created by Xcode) distro cert which I revoked. After doing that a new error came up. ("An App ID with Identifier '' is not available"... it also wasn't helpful) Eventually this lead me to the fact that my App Id in the member portal didn't have entitlements matching the build.
I solved this issue by editing the provisioning profile in the member center which is used in my app and re-install the provisioning profile.
I recently changed computer.
The reason for me was that I had several developer certificates in the Apple Developer member portal.
The solution was :
Go to Apple Developer Portal
Go Under Certificates -> Production
Click on "Revoke" for the oldest certificates and keep the most recent one
Revoking certificates won´t affect your Apple Store apps :).
I had this happen to me when I accidentally reset the certificate on another mac. Here's my scenario.
Mac1 - Had working certificate.
Mac2 - I accidentally reset the iOS distribution certificate
Mac1 stopped working and I get the message "Your account already has a valid distribution certificate"
The fix was
On Mac2, Keychain access -> certificates -> iOS Distribution certificate (for you/your company) -> export to p12 file (it will ask you to set a password)
Copy the exported file to Mac1
On Mac1, Keychain access -> certificates -> iOS Distribution certificate (for you/your company) -> delete (this is the old one that does not work)
On Mac1, double click the p12 file (then enter your password).
You should see a new iOS distribution certificate (for you/your company) in the certificate section of Keychain access.
This fixed the issue for me on Mac1.
Got it solved by deleting the provisioning profile which is managed by Xcode
(XC iOS Ad Hoc: *) from the member center
I have looked at lodes of other posts about this and tried all of them, but I still keep getting this error...
I have opened key chain and there is a developer ID which is "valid" and a private key.
I have re-created several provisioning profile for the apps (selecting the app and device).
I am on a team based account, so I cant delete all the other provisioning profiles as other people may be using them, which is what a few solutions have said, but I have tried deleting all the provisioning profiles for the app and re-making them, but it still doesn't seem to work.
I am using xcode 4.6.3 and trying to install the app on iPad 6.1
Here are screenshots:
May be your certificate is revoked and signed with a different key which you don't have, ask for the private key of newly signed certificate may be some has it.
Hope it works.
Edit
Your Developer profile needs to be recreated, and you can revoke your own developer certificate, it will not harm anyone else if you are in a team.
Edit 2
To create a new developer certificate do the following
Delete the old developer certificate.
Login to your developer portal developer.apple.com/iphone
Select Certificates, Identifiers and Profiles from iOS Developer
Program menu on right.
Choose Certificates, then choose Development.
You will see your Developer certificate there, select that, then you
will see Revoke option, press that and Revoke.
After revoking there you will see steps to create the Certificate
follow that.
After creation you will need to update the Profile too with the new
certificate.
Hey guys I have to publish an App with a foreign Apple Account. I got the invitation and now I can download the Distribution Provisionig Profile. However I also need the valid signing identity - that means that I also have to create a Distribution Certificate but this option is disabled or I only can create a Development Certificate (like shown in the screenshot below).
Am I right that this Distribution Certificate has to be created by the Account Owner? What exactly does he have to do in order to get the available Distribution Provisioning Profile to work on my machine?
I Would be glad for some hints!
The account owner has to export both the distribution certificate and the private key and share them with you. You install them on your computer and everything should work.
I was trying to create a new provisioning profile for beta test distribution on an app I'm working on, and I'm running into some difficulties. I believe I have valid certificates available, since I can get apps up and running when they're attached to the development machine. I also have my private key connected to the developer certificate.
The problem is that I cannot create a new provisioning profile from within Xcode. In the organizer, after hitting create profile, no certificates are displayed in the menu. Even if I fill in all the details that I can, I am not allowed to create the profile since there is no certificate to attach to it.
In the Developer Profile tab, I do have both developer and distribution identities. I can also create the provisioning profile from the provisioning portal, which is then picked up by Xcode and automatically downloaded. It would just be nice to be able to complete this task from within Xcode.
Thanks!
Check your keychain for invalid certificates and remove them. Re-download/re-install Apple's WWDR intermediate certificate (available on the provisioning page).
Turns out, installing Xcode 4.3 corrected it. I have no idea what was the cause, but the upgrade fixed the issues so I'm not particularly concerned now.
I am currently fixing bugs for a client who had the iPhone app made by someone else.
I think i have to use the clients distribution certificate to upload the binary of update..
I downloaded the distribution certificate but Xcode is complaining valid sign identity not found.
I know it is an issue with the keychain .. i don't have accces to the keys of the original developer..
how to proceed?
Invalidate the certificate
Create a new one
Create a new distribution profile using the new certificate.
Install that profile in XCode
???
Profit :)
If use certificate from another person then you are in need of private key. Without private key, you will be unable to sign binaries in Xcode and test your application on any Apple device. Try to request a .p12 file from original developer for this certificate or create new one yourself.
Delete any certificates you might have from the provisioning portal
Create a new Certificate Signing Request on your mac
Upload that request to the Provisioning portal to generate a new certificate
Associate your existing provisioning profile to the newly generated Certificate
Add the new provisioning profile to XCode
Compile your app :-) Done.
This will not delete any app details. This is just creating a new certificate. You will still be able to use all your old details. So dont worry.