General:
Forums topic: Code Signing
Forums subtopic: Code Signing > Notarization
Forums tag: Notarization
WWDC 2018 Session 702 Your Apps and the Future of macOS Security
WWDC 2019 Session 703 All About Notarization
WWDC 2021 Session 10261 Faster and simpler notarization for Mac apps
WWDC 2022 Session 10109 What’s new in notarization for Mac apps — Amongst other things, this introduced the Notary REST API
Notarizing macOS Software Before Distribution documentation
Customizing the Notarization Workflow documentation
Resolving Common Notarization Issues documentation
Notary REST API documentation
TN3147 Migrating to the latest notarization tool technote
Fetching the Notary Log forums post
Q&A with the Mac notary service team Developer > News post
Apple notary service update Developer > News post
Notarisation and the macOS 10.9 SDK forums post
Testing a Notarised Product forums post
Notarisation Fundamentals forums post
The Pros and Cons of Stapling forums post
Resolving Error 65 When Stapling forums post
Many notarisation issues are actually code signing or trusted execution issue. For more on those topics, see Code Signing Resources and Trusted Execution Resources.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"
Notarization
RSS for tagNotarization is the process of scanning Developer ID-signed software for malicious components before distribution outside of the Mac App Store.
Selecting any option will automatically load the page
Post
Replies
Boosts
Views
Created
I have been code signing my py2app Python applications for over 5 years. Recently, my application notarizes and staples with no errors. However, when I try to verify the signature I get the above error. I do not see any errors in the appropriate notary log file. Can't figure out how to post the log file. The associated ID is: eb78c6b0-cdd2-414f-9dd3-24315a27d457
Can anyone point me to an appropriate reference ?
Topic:
Code Signing
SubTopic:
Notarization
Notarization submissions stuck “In Progress” for 5+ days (SwiftUI macOS menu bar app)
Hello,
I’m experiencing an issue where all notarization submissions remain “In Progress” for several days.
Environment
macOS native app written in Swift / SwiftUI
Menu bar application
Built with Xcode
Developer ID Application signing
Hardened Runtime enabled
App Sandbox disabled
Uses SMAppService for “Start at Login”
Artifact structure
ClaudeUsageTracker.zip
└ ClaudeUsageTracker.app
(no nested directory)
Verification
codesign --verify --deep --strict --verbose=2 ClaudeUsageTracker.app
This succeeds without errors.
Notarization submissions
2026-03-06 — In Progress
ID=215814fc-57c5-4f99-88fe-ed2db4d3e3d9
2026-03-06 — In Progress
ID=70948178-191c-4840-a9c7-52c321b725e5
2026-03-09 — In Progress
ID=14a88b79-df4d-4d83-9bfe-fa6eafc9bf76
All submissions remain In Progress for 5+ days, and notarytool log is not available yet.
Command used
xcrun notarytool submit ClaudeUsageTracker.zip \
--keychain-profile "notarytool-profile"
The app is a small utility and the archive is only a few MB.
Is there a known issue with the notarization queue or with accounts getting stuck in a processing state?
Any guidance would be appreciated.
Thanks.
Repository: https://github.com/grad13/Claude-Usage-Tracker
Hi,
I'm trying to notarize a macOS app using xcrun notarytool, but the submission has been stuck in "In Progress" for over 24 hours.
Submission ID: a3e0914a-c45f-4614-bd7c-cbae4c7b0b55
Created: 2026-03-08T01:55:29.272Z
Team ID: 69YV6P6AKZ
It looks like the signature is valid and the only missing step is notarization.
I tried submitting twice, but the second submission is also stuck in In Progress.
Is this likely a backlog in the notarization service, or is there something that could cause submissions to stay "in progress" for so long?
Thanks!
Topic:
Code Signing
SubTopic:
Notarization
Hi,
I'm a new Developer ID account holder submitting my first app for notarization. All submissions have been stuck "In Progress" for 72+ hours. Apple System Status has shown all services operational throughout.
Team ID: 4L9YA7S99L
$ xcrun notarytool history --keychain-profile "blackbox"
Successfully received submission history.
history
--------------------------------------------------
createdDate: 2026-03-09T11:19:41.697Z
id: 2c0cdf3d-a3ac-4d86-8eb0-2f601b2d09c5
name: Blackbox-0.2.0.dmg
status: In Progress
--------------------------------------------------
createdDate: 2026-03-07T18:11:37.660Z
id: 5ab09d84-b2e2-4738-9b63-100a7dd46882
name: Blackbox-0.1.0.dmg
status: In Progress
--------------------------------------------------
createdDate: 2026-03-06T22:47:21.410Z
id: 1c90fa3e-c52a-4468-8056-06ff5d7d3752
name: Blackbox-0.1.0.dmg
status: In Progress
--------------------------------------------------
createdDate: 2026-03-06T22:34:55.803Z
id: 4bbd6f77-7ff6-445f-817c-21f9909dfe7a
name: Blackbox-0.1.0.dmg
status: In Progress
--------------------------------------------------
createdDate: 2026-03-06T21:28:26.904Z
id: 3c63ed16-be5d-4900-b82d-5df9557a47b4
name: Blackbox-0.1.0.dmg
status: In Progress
--------------------------------------------------
createdDate: 2026-03-06T21:24:14.558Z
id: 76df3f18-57a1-49b7-87e2-3f2bf0e4e6d5
name: Blackbox-0.1.0.dmg
status: Invalid
The Invalid submission (76df3f18) was error 4000 due to unsigned binaries in a bundled framework. That's been fixed in all subsequent submissions.
The app is a small macOS menu bar utility (~2 MB DMG), signed with Developer ID Application certificate, hardened runtime enabled, no restricted entitlements. codesign --verify --deep --strict and spctl --assess --type execute both pass locally.
Is there a known processing delay for first-time Developer ID accounts, or could something be stuck on the backend?
Thanks for any guidance.
I am trying to notarize my first macOS app for direct distribution outside the Mac App Store using Developer ID Application signing.
Team ID:
32S6XVAQPY
Environment:
macOS app distributed via Developer ID
notarytool with a saved keychain profile
archive exported locally, app zipped with ditto
What I already verified locally:
The archived app is signed with:
Developer ID Application: (32S6XVAQPY)
codesign --verify --deep --strict passes
spctl shows:
source=Unnotarized Developer ID
syspolicy_check distribution only reports the expected missing notary ticket
Hardened runtime is enabled
The app bundle and nested Sparkle executables were re-signed and now have valid Developer ID signatures with secure timestamps
Important note:
I previously had a real signing issue in nested Sparkle binaries, and Apple rejected that submission quickly as Invalid. I fixed those signatures, and now new submissions no longer fail quickly but remain stuck In Progress.
Submission IDs currently stuck:
bea6c4b3-b107-4c81-8042-6c58b1cf5087
5489e29c-d583-4779-a125-ca0fbd9cad0b
Earlier invalid submission with a concrete Sparkle signing error:
10df648b-eca8-428f-98d6-4cb4096153ad
Apple reported invalid Developer ID / missing secure timestamp on:
Sparkle.framework/Versions/B/Updater.app/Contents/MacOS/Updater
Sparkle.framework/Versions/B/Autoupdate
Sparkle.framework/Versions/B/XPCServices/Downloader.xpc/Contents/MacOS/Downloader
Sparkle.framework/Versions/B/XPCServices/Installer.xpc/Contents/MacOS/Installer
That Sparkle issue has since been fixed locally and re-verified.
Question:
Is there currently a notarization backlog or any known issue affecting first-time macOS notarizations or Developer ID submissions? At this point the remaining submissions appear valid locally but sit In Progress for a very long time.
All my notarization submissions are rejected with statusCode 7000 ("Team is not yet configured for notarization"), even though my
Apple Developer Program membership has been active since February 26, 2026.
Error log:
status: Rejected
statusCode: 7000
statusSummary: "Team is not yet configured for notarization"
My setup:
Team ID: 9NL8W3646T
Membership: Individual, ACTIVE (confirmed by Apple Support on Feb 26)
Certificate: Developer ID Application — valid, signing works
Hardened runtime: enabled
Latest failed submission: ce6a4ca9-ccc2-4838-b96a-d9ed16557237 (March 6)
I have support case 102832266798 open since March 4. Apple responded on March 6, but the email never arrived in my inbox and the
portal doesn't let me view the response.
Could DTS help enable notarization for my team? This is blocking distribution of my macOS app. Thank you.
Hi,
I have two notarization submissions that have been stuck in "In Progress" status for several hours with no resolution.
Submission IDs:
2158329b-8beb-400b-aa80-f8c2a5f30106 (submitted ~9 hours ago)
73174908-3ed9-4a85-afe0-a3c3b0722a61 (submitted ~3 hours ago)
Both submissions show "In Progress" indefinitely and no log is available for either. The notarytool --wait --timeout
30m timed out on the second submission with exit code 124.
The app is signed with a valid Developer ID Application certificate, all binaries including frameworks and dylibs are
individually signed with --options runtime and --timestamp. A previous submission returned valid on disk / satisfies
its Designated Requirement via spctl --assess.
Could you please investigate whether these submissions are stuck on your end, and advise on next steps?
Thank you.
Topic:
Code Signing
SubTopic:
Notarization
I'm distributing a macOS .pkg installer signed with Developer ID Installer and notarized via notarytool. On macOS 26.3 (Tahoe, Build 25D125), the package is rejected by Gatekeeper when downloaded from the internet.
What works:
pkgutil --check-signature → signed, Developer ID Installer, full chain (G2 intermediate + Apple Root CA)
xcrun stapler validate → "The validate action worked!"
xcrun notarytool info <id> → status: Accepted
The .app inside the .pkg passes spctl -a -vvv → "accepted, source=Notarized Developer ID"
What fails:
spctl -a -vvv --type install mypackage.pkg → rejected, origin=Developer ID Installer
Raw assessment: assessment:remote = true, assessment:verdict = false
Double-clicking the downloaded .pkg shows only "Move to Trash" / "Done" (no "Open" option)
syspolicyd log: meetsDeveloperIDLegacyAllowedPolicy = 0 (expected, since the cert is new), but no "notarized" match is logged
Certificate details:
Developer ID Installer, issued Feb 28, 2026, valid until 2031
OID 1.2.840.113635.100.6.1.14 (Developer ID Installer) — critical
OID 1.2.840.113635.100.6.1.33 — timestamp 20260215000000Z
Intermediate: Developer ID Certification Authority G2 (OID 1.2.840.113635.100.6.2.6)
security verify-cert → certificate verification successful
Build process:
productbuild --distribution ... --sign <SHA1> (also tried productsign)
Both produce: Warning: unable to build chain to self-signed root
xcrun notarytool submit → Accepted
xcrun stapler staple → worked
Workaround:
xattr -d com.apple.quarantine ~/Downloads/mypackage.pkg allows opening the installer.
Question:
Is spctl --type install assessment expected to work differently on macOS 26 Tahoe? The same signing and notarization workflow produces .app bundles that pass Gatekeeper, but .pkg installers are rejected. Is there a new requirement for .pkg distribution on macOS 26?
Environment: macOS 26.3 (25D125), Xcode CLT 26.3
I'm submitting a native macOS app (Swift/SwiftUI, arm64) that includes Sparkle.framework for auto-updates. All binaries are signed with a Developer ID Application certificate using --options runtime and --timestamp.
I've submitted 12+ times over the past two days, both from local notarytool submit and from GitHub Actions CI. Every submission uploads successfully and returns a valid submission ID, but then stays at "In Progress" indefinitely — none have resolved to Accepted or Invalid.
Two early submissions did eventually come back "Invalid" — Apple's rejection log showed the Sparkle nested binaries had ad-hoc signatures (they were being signed as individual Mach-O files instead of bundle directories). I fixed this with proper inside-out bundle signing. Since the fix, local codesign --verify --deep --strict passes cleanly, but all ~10 subsequent submissions remain stuck at "In Progress".
9UT54V24XG
Would appreciate any guidance, or if someone from the notary team could check our queue. Happy to provide specific submission IDs.
Topic:
Code Signing
SubTopic:
Notarization
Hello,
I’m currently in the process of app notarization, but my status is stuck in the "In Process" state, and I’m unsure how long this should take. I’d appreciate any advice or insights.
Issue Description
After submitting my app for notarization, the status has been stuck in "In Process" for an extended period.
There seems to be no progress, and it’s taking longer than I expected for the process to complete.
The status hasn’t changed, and it’s been 5 days since I submitted the app.
Has anyone encountered a similar issue? How long does the notarization process usually take? Any advice on how to resolve this or if there’s something I might be missing?
Thanks in advance for your help!
Topic:
Code Signing
SubTopic:
Notarization
This is my submission, my earliest submission has be stuck for a couple of days can someone please help. This is blocking our launch.
--------------------------------------------------
createdDate: 2026-03-01T15:57:46.893Z
id: 4cd9bb60-67eb-4f59-be9b-952248da33cf
name: Snip-1.0.0-arm64.dmg
status: In Progress
--------------------------------------------------
createdDate: 2026-03-01T15:07:04.101Z
id: fc88fa42-6ffe-4fee-86b2-0cec44c4391b
name: Snip.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-02-28T06:48:58.307Z
id: e6cabf68-2963-4971-a057-fb4c5a1bdb4c
name: Snip.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-02-27T17:02:33.195Z
id: 4e038aab-e429-4dfa-abcd-afcd49241a31
name: Snip.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-02-27T17:02:21.907Z
id: 4a908c50-812b-48c1-949d-8d6d4c9dec40
name: Snip.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-02-27T14:28:38.585Z
id: bccbc5bc-1cc7-4417-ab57-545b0cc6cc7b
name: Snip.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-02-27T08:35:47.185Z
id: 4219d594-ee41-4905-8ea5-af89dc924b4f
name: Snip.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-02-27T08:07:51.982Z
id: 08fce978-8dc1-45bb-aac1-ea932bd08b02
name: Snip.zip
status: In Progress
Successfully received submission history.
history
--------------------------------------------------
createdDate: 2026-02-28T06:48:58.307Z
id: e6cabf68-2963-4971-a057-fb4c5a1bdb4c
name: Snip.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-02-27T17:02:33.195Z
id: 4e038aab-e429-4dfa-abcd-afcd49241a31
name: Snip.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-02-27T17:02:21.907Z
id: 4a908c50-812b-48c1-949d-8d6d4c9dec40
name: Snip.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-02-27T14:28:38.585Z
id: bccbc5bc-1cc7-4417-ab57-545b0cc6cc7b
name: Snip.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-02-27T08:35:47.185Z
id: 4219d594-ee41-4905-8ea5-af89dc924b4f
name: Snip.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-02-27T08:07:51.982Z
id: 08fce978-8dc1-45bb-aac1-ea932bd08b02
name: Snip.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-02-27T07:25:12.257Z
id: dcba81a6-f9a5-42bd-9e04-bffa2aeabb10
name: Snip.zip
status: Invalid
the first submission failed becuase i suse the wrong certificate type, however subsequent submissions are stuck for very long
Topic:
Code Signing
SubTopic:
Notarization
I've submitted a few first notarizations for my electron app - I've verified with all the QA and resources that I am doing the correct thing - but its silently just holding all my notarization requests on apples side with no logs. I'm trying to launch my app this week - how should I proceed?
Topic:
Code Signing
SubTopic:
Notarization
Made a notarization request a few hours ago and woke up to check the history and it's no longer available. Not rejected/accepted just not found. I have gone ahead to make another request but I have no confidence because I expect the same thing to happen again. Any guidance?
See logs below:
daramfon@MacBook-Pro-3 frontend % xcrun notarytool history --apple-id "$APPLE_ID" --password "$APPLE_APP_SPECIFIC_PASSWORD" --team-id "$APPLE_TEAM_ID"
Successfully received submission history.
history
--------------------------------------------------
createdDate: 2026-02-20T23:53:14.066Z
id: 6f2fadc0-2e8f-4331-a253-68f81334ebc6
name: Speakeasy AI-0.1.0-arm64.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-02-20T23:47:12.897Z
id: 435aec4f-5356-49a5-898d-48aaafb7949f
name: Speakeasy AI.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-02-20T22:35:23.947Z
id: 95896757-873a-4e54-a527-03dc767c9cb5
name: Speakeasy AI.zip
status: In Progress
daramfon@MacBook-Pro-3 frontend % xcrun notarytool history --apple-id "$APPLE_ID" --password "$APPLE_APP_SPECIFIC_PASSWORD" --team-id "$APPLE_TEAM_ID"
No submission history.
daramfon@MacBook-Pro-3 frontend % xcrun notarytool info 6f2fadc0-2e8f-4331-a253-68f81334ebc6 --apple-id "$APPLE_ID" --password "$APPLE_APP_SPECIFIC_PASSWORD" --team-id "$APPLE_TEAM_ID"
Submission does not exist or does not belong to your team.
id: 6f2fadc0-2e8f-4331-a253-68f81334ebc6
Hi! I am encountering an issue with the notarization process.
I'll leave here the outputs of a few command that I think might be useful.
user@AndreisMac % pkgutil --check-signature mypkg.pkg
Package "mypkg.pkg":
Status: signed by a developer certificate issued by Apple for distribution
Notarization: trusted by the Apple notary service
Signed with a trusted timestamp on: 2026-02-18 18:46:16 +0000
Certificate Chain:
...
user@AndreisMac % spctl -a -vv --type install mypkg.pkg
mypkg.pkg: rejected
origin=Developer ID Installer: MyComp LLC (ABCD)
user@AndreisMac % xcrun notarytool submit mypkg.pkg --keychain-profile "notary-profile" --wait
Conducting pre-submission checks for mypkg.pkg and initiating connection to the Apple notary service...
Submission ID received
id: e76f34b3-7c91-451c-a539-8fb39809a5bd
Upload progress: 100,00% (13,3 MB of 13,3 MB)
Successfully uploaded file
id: e76f34b3-7c91-451c-a539-8fb39809a5bd
path: /path/to/mypkg.pkg
Waiting for processing to complete.
Current status: Accepted...............
Processing complete
id: e76f34b3-7c91-451c-a539-8fb39809a5bd
status: Accepted
user@AndreisMac % spctl -a -vv --type install mypkg.pkg
mypkg.pkg: rejected
origin=Developer ID Installer: MyComp LLC (ABCD)
As you can see:
the installer is signed with a Developer ID Installer (the contents are signed and notarized as well)
the first spctl check is failing(even if the installer was already notarized on our build server)
trying to notarize again seems to work
checking again still shows the installer as rejected
I can run the installer locally by removing the quarantine flag, but this is not what I am expecting from a signed¬arized installer.
Interestingly enough, trying this installer on a different MacOS machine works as expected(no quarantine) and spctl shows it as notarized(Accepted).
Any idea what's wrong with my machine?
Hi everyone,
For the past three days I've been unable to notarize my app — every attempt fails with an HTTP 500 error from Apple's notarization service. What's unusual is that the error occurs not only during submission, but also when simply validating credentials via store-credentials.
Example:
$ xcrun notarytool store-credentials "notarytool-password" \
--apple-id <id> --team-id <team> --password <app-specific-password>
Validating your credentials...
Error: HTTP status code: 500. Internal Server Error
Request ID: K6NYCMIFNM66OI2WRG3ORZEDUE.0.0
Please try again at a later time.
Since the failure happens at credential validation — before any package is even uploaded — I'm fairly confident this is a server-side issue, not something wrong with my setup or the binary. I've tried across different network connections, same result.
Has anyone else been hitting this? Is there a known outage or incident on Apple's notarization infrastructure? Any way to escalate or get a status update beyond checking developer.apple.com/system-status/?
Thanks
Seeing my notarizations getting stuck. This is becoming a blocker for releasing. What's strange is that earlier versions of the same app (very similar) passed notarization very quickly. Any advice or recourse?
I am trying to notarize my app but it rejected with this error after 5 days of being in progress.
{
"logFormatVersion": 1,
"jobId": "8291ad9e-4c8e-4974-8753-af1a78e5a4a2",
"status": "Rejected",
"statusSummary": "Team is not yet configured for notarization. Please contact Developer Programs Support at developer.apple.com under the topic Development and Technical / Other Development or Technical Questions.",
"statusCode": 7000,
"archiveFilename": "SkanVirtualAssistant-1.0.0.dmg",
"uploadDate": "2026-02-05T03:13:41.280Z",
"sha256": "eb95cc25a382e5ce36fc2b7e195c20a1a09cfbfb71a057e754306ad400300d38",
"ticketContents": null,
"issues": null
}
Can anyone help with this? I have an urgent product launch deadline in a week! I have contacted developer program support but have received no response.
Not accepted yet (all are still processing, none are rejected)
387af103-42d3-4d95-ae22-0289f90a8559 — In Progress
2d836594-9fb2-41a5-990c-7ea4e0870af0 — In Progress
e61ba9e3-5ff1-4856-8e9d-39c08445ff63 — In Progress
1defdeec-50b4-45c5-b32d-53ca6e4538bb — In Progress
34e60b80-20c3-4ea7-93a7-2bb9e7c6f05c — In Progress
09222b71-eae1-4c5c-aca4-368f697b2a39 — In Progress
eb5327e8-161e-4185-9920-3facf60b7b4b — In Progress
784fc210-d0bf-4924-b0a6-eb8bbac0f2c8 — In Progress
74bc8f31-b1b0-4bed-9142-0c03100a062a — In Progress
4739620c-894a-4283-a43b-df57b29a1771 — In Progress
have created new certificate as well same result.
waiting for apple support to give any answers.
Topic:
Code Signing
SubTopic:
Notarization
Notarization submission has been stuck in "In Progress" status for over 15 hours with no resolution.
Hi there, I am trying to roll out distribution to paid users who are unable to receive anything from me for quite some time now, and I've read that notarization is quick. But I've found myself to be under quite a delay. Wondering if I could please get some help.
Submission Details:
ID: e3dff14c-16ab-41a7-a81c-0d1774c66588
Submitted: 2026-02-08T16:42:07.377Z
File: Resonant-0.1.0-arm64.dmg (~200MB)
Status: In Progress (stuck)
Evidence:
Upload completed successfully within minutes
Delay is entirely server-side processing
Same app structure notarized successfully on Feb 5 (submission f5f4c241)
Multiple other submissions stuck since Feb 5 (see history below)
Stuck Submissions (all "In Progress" for days):
e3dff14c (Feb 8, 16:42 UTC) - 15+ hours
3e6bdcb5 (Feb 8, 16:11 UTC) - 16+ hours
37fd1b9f (Feb 8, 12:53 UTC) - 20+ hours
f21a1d9b (Feb 8, 12:31 UTC) - 20+ hours (different app, Clippa.zip)
417244e8 (Feb 8, 06:18 UTC) - 26+ hours
891f370f (Feb 7, 11:44 UTC) - 2+ days
1debba51 (Feb 7, 05:44 UTC) - 2+ days
6a06b87f (Feb 6, 14:16 UTC) - 3+ days
9867261c (Feb 6, 13:44 UTC) - 3+ days
1a7c3967 (Feb 6, 12:58 UTC) - 3+ days
Last Successful Notarization:
f5f4c241 (Feb 5, 18:24 UTC) - Accepted in normal timeframe
Impact:
Unable to distribute production release. This is blocking critical bug fixes from reaching users.
Expected Behavior:
Notarization should complete within 2-10 minutes as documented and as experienced prior to Feb 5.
Request:
Please investigate why submissions are not being processed and either:
Clear the backlog and process pending submissions
Provide guidance on how to proceed with distribution