How to renew an iPhone development certificate?

Question

My development certificate has expired. What is the correct method of renewing it? Do you revoke the expired certificate & submit a new Certificate Signing Request? Do provisioning profiles have to be recreated? Are there any side-effects of doing this?

Answer 1

With Xcode 5, following steps:

1) Remove old certificate from https://developer.apple.com

2) Open XCode - Preferences - Accounts - View Details, then click refresh icon in left-bottom

3) Xcode asks if you want to request a new certificate

Enjoy this simple work

Answer 2

Don't know if this will help but I performed the following steps today to get my expired profile back on track.

NOTE: These steps are a day after my provisioning / certificates expired. I purposely did it a day after expiration. It makes the things much easier, in a weird way.

STEPS TO RENEW

1) login to itunes connect provisioning portal https://developer.apple.com/ios/manage/provisioningprofiles/viewDistributionProfiles.action

2) Click on certificates

3) Request New Certificate

4) Upload file CertificateSigningRequest.certSigningRequest from desktop folder. (if you had saved one from last time) For more info check this link

5) Hit submit

6) Launch your Xcode program

7) Click on Device

8) Click on Provisioning Profiles

9) Select your expired certificate and hit the renew button on the top.

10) Wait 2-5 minutes

11) Go back to https://developer.apple.com/ios/manage/provisioningprofiles and there should be a new distribution certificate

11a) Go to provisioning on the iTunes web and edit --> modify all your provisioning profiles and hit submit. Just modify any device or check box on them.

11b) After a few seconds your profiles will be renewed. (Hit refresh button on your browser)

12) download both development and distribution certificates. (no need to download provisioning certificates)

13) Save them in a new folder on desktop and double click on the dev and distribution certificates

14) This launches keychain. Delete old / expired keychains

15) Go back to Xcode under Provisioning Profiles and hit the Refresh button at the bottom

16) All should be working and nothing should be out to date or expired

Answer 3

In my experience I started by deleting the expired certificate. Then I did the whole Request a Certificate from a Certificate Authority process:

After that was done I went into iOS Provisioning Portal--> Provisioning and clicked Modify for the profile that was giving me trouble. I then selected my device and submitted. Lastly I downloaded the new profile and added it to the Xcode Project.

NB: This is for Xcode 4.3 on Lion.

Answer 4

If the certificate is expired, you can not revoke it. You need to re-create it through the developer program portal.

Once you have your new certificate available, I am not sure if you need to create again the provisioning profiles associated to your previous certificate. I guess you must probably do this (unless the provisioning profiles just use the certificate subject and not the valid from/ to fieds).

To the best of my knowledge, there are no other side-effects.

Answer 5

With Xcode 4.4.1 the organiser takes care of renewing certificates.

In my case I had to do the following steps:

1) Open Xcode and launch the Organizer (Window-->Organizer)

2) Go to the Device tab and under the Teams section select your developer identity (If your iOS Development certificate has expired you should not see it in the list)

3) Hit refresh on the bottom right

4) Xcode asks if you want to request a new certificate

5) Approve the request and complete the procedure (Export the certificate if you develop on other Macs)

6) Close Xcode

7) Remove the expired certificate from keychain (I suggest to save it before deleting it anyway, even if unnecessary for the following steps - it's always good to keep backups also of expired certificates)

8) Open Xcode and for each Xcode project choose the new Code signing identity in the Build settings of your Target.

9) Clean up the project (Product-->Clean)

10) Compile and deploy.

Pretty straight-forward.

Answer 6

I've just renewed my expired certificate and provisioning profile using Xcode 4.3.2. The Apple docs say to 'Use [the device] for Development' in the Xcode Organiser - which I'd done originally but that button doesn't show up anymore.

I tried deleting the existing profiles but that didn't help. I eventually noticed the 'Add to Portal' button in the bottom bar of Organiser. Clicked on that and after following the prompts it did the trick - it created a new certificate and provisioning profile.

Happy days - well almost - Xcode itself was still moaning about a duplicate certificate in Keychain Access. Deleted the expired one (and any others that were expired) and Xcode is now happy (I had to change a file to get Xcode to actually try to re-build though).

---

For XCode 5 I followed Baryon Lee's post, except that I didn't need to remove the old certificate first (I tried up up-vote you Baryon but I'm a couple of reputation points short :-( ). I needed to add my details onto the Accounts page first.