Automatically create and maintain iOS code signing certificates.
cert is focused exclusively on code signing. You can create new code signing identities for different environments (development and distribution) and use any existing valid certificates installed locally.
Get in contact with the developers on Twitter: @FastlaneTools
cert is part of fastlane: The easiest way to automate beta deployments and releases for your iOS and Android apps.
Note: It is recommended to use match according to the codesigning.guide for generating and maintaining your certificates. Use
cert directly only if you want full control over what's going on and know more about codesigning.
sudo gem install fastlane
Make sure, you have the latest version of the Xcode command line tools installed:
Please check out this guide which shows how to manually create an iOS code signing profile and a provisioning profile using the Apple Developer Portal.
In the gif I used
cert && sigh, which will first create an iOS code signing certificate and then a provisioning profile for your app if
This will check if any of the available signing certificates is installed on your local machine.
Only if a new certificate needs to be created,
- Create a new private key
- Create a new signing request
- Generate, downloads and installs the certificate
- Import all the generated files into your Keychain
cert will never revoke your existing certificates. If you can't create any more certificates,
cert will raise an exception, which means, you have to revoke one of the existing certificates to make room for a new one.
You can pass your Apple ID:
fastlane cert -u email@example.com
For a list of available commands run
fastlane cert --help
Keep in mind, there is no way for
cert to download existing certificates + private keys from the Apple Developer Portal, as the private key never leaves your computer.
fastlane cert --help to get a list of all available environment variables.
Fastfile to contain the following code:
lane :beta do cert sigh(force: true) end
force: true will make sure to re-generate the provisioning profile on each run.
This will result in
sigh always using the correct signing certificate, which is installed on the local machine.
How is my password stored?
fastlane: The easiest way to automate beta deployments and releases for your iOS and Android apps
deliver: Upload screenshots, metadata and your app to the App Store
snapshot: Automate taking localized screenshots of your iOS app on every device
frameit: Quickly put your screenshots into the right device frames
pem: Automatically generate and renew your push notification profiles
sigh: Because you would rather spend your time building stuff than fighting provisioning
produce: Create new iOS apps on iTunes Connect and Dev Portal using the command line
spaceship: Ruby library to access the Apple Dev Center and iTunes Connect
pilot: The best way to manage your TestFlight testers and builds from your terminal
boarding: The easiest way to invite your TestFlight beta testers
gym: Building your iOS apps has never been easier
scan: The easiest way to run tests of your iOS and Mac app
match: Easily sync your certificates and profiles across your team using git
Use the 'Provisioning Quicklook plugin'
Download and install the Provisioning Plugin to easily preview provisioning profile files and certificates.
Please submit an issue on GitHub and provide information about your setup
Code of Conduct
Help us keep
cert open and inclusive. Please read and follow our Code of Conduct.
This project is licensed under the terms of the MIT license. See the LICENSE file.
This project and all fastlane tools are in no way affiliated with Apple Inc. This project is open source under the MIT license, which means you have full access to the source code and can modify it to fit your own needs. All fastlane tools run on your own computer or server, so your credentials or other sensitive information will never leave your own computer. You are responsible for how you use fastlane tools.