Asset Validation Failed (90034) Missing or Invalid signature

Question

Asset Validation Failed (90034) Missing or Invalid signature

William Buchanan 61

Hi all

I am trying to upload my Maui app to the Apple App Store from Azure Devops and running into a multitude of problems.

Currently I am getting this error:

Asset Validation Failed (90034) Missing or Invalid signature

I have create what I believe is all the required certs and provisioning profile so not really sure what I am missing. Here is what I have in my csproj file:

<PropertyGroup Condition="$(TargetFramework.Contains('-ios'))">

<CodesignEntitlement>Entitlements.plist</CodesignEntitlement>
<CodesignKey>Apple Distribution: XXX PTY LTD (XXXXXAAU)</CodesignKey>
<CodesignProvision>XXXProvisioningProfile</CodesignProvision>
</PropertyGroup>

I have the p12 file and the provisioning profile file in the Devops library, and bring them in to the build like this:

task: InstallAppleCertificate@2
displayName: 'Install Apple Certificate'
inputs:
certSecureFile: '$(appStoreCert)'
certPwd: '$(CERTIFICATEPW)'
keychain: 'temp'

task: InstallAppleProvisioningProfile@1
displayName: 'Install Apple Provisioning Profile'
inputs:
provisioningProfileLocation: 'secureFiles'
provProfileSecureFile: '$(provFile)'

It just fails in Devops with no error messages, but on my mac I am using altool to verify the ipa file and it shows the error above as being the problem. Any thoughts?

Thanks

Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-22T06:25:23.217+00:00

You got this error locally not from Devops , right? Usually this error ( Asset Validation Failed (90034) Missing or Invalid signature ) means invalid CodesignProvision, you could try check if the distribution certificate was expired and check the AppleWWDRCA in Keychain.
William Buchanan 61 Reputation points

2022-12-22T08:00:21.657+00:00

Hi @Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.)

Thanks for the reply.

I made a new certificate and had the same problem. Also the Apple WWDRCA was freshly installed.

Any other thoughts?

Thanks
Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-22T09:06:31.403+00:00

Would you mind sharing the detailed error message? Does it point to any libraries?
Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-22T09:12:38.23+00:00

You want to publish a .net7 iOS app according to the official doc- Publish a .NET MAUI app for iOS - .NET MAUI | Microsoft Learn, right? What's the Xcode version and VS version are you using?
William Buchanan 26 Reputation points

2022-12-22T09:32:57.667+00:00

2022-12-21 14:42:45.805 * Error: Validation failed for 'xxxx.ipa'.
2022-12-21 14:42:45.805 * Error: Asset validation failed Missing or invalid signature. The bundle 'xxx.xxx.xxx' at bundle path 'Payload/xxxxapp' is not signed using an Apple submission certificate. (ID: d5bffa20-9a19-4975-b842-7befce98b52d) (90034)
{
NSLocalizedDescription = "Asset validation failed";
NSLocalizedFailureReason = "Missing or invalid signature. The bundle 'xxx.xxx.xxx' at bundle path 'Payload/xxxx.app' is not signed using an Apple submission certificate. (ID: d5bffa20-9a19-4975-b842-7befce98b52d)";
"original_server_error" = {
code = "STATE_ERROR.VALIDATION_ERROR.90034";
detail = "Missing or invalid signature. The bundle 'xxx.xxx.xxx' at bundle path 'Payload/xxxx.app' is not signed using an Apple submission certificate.";
id = "d5bffa20-9a19-4975-b842-7befce98b52d";
status = 409;
title = "Asset validation failed";
};
}
William Buchanan 61 Reputation points

2022-12-22T09:36:01.62+00:00

That is right, but I am deploying from an Azure Devops Pipeline (so not from VS). I have no idea what XCode version is (does it even use XCode?). VS version is 17.4.3.
William Buchanan 61 Reputation points

2022-12-22T09:39:09.783+00:00

Just to clarify - I got this error by running altool –validate-app with the ipa file built by Devops
William Buchanan 61 Reputation points

2022-12-22T19:35:56.3+00:00

Someone else just regenerated the certs on a different mac and having the same problem.
William Buchanan 61 Reputation points

2022-12-22T20:39:39.083+00:00
Question - Is :

<EnableCodeSigning>true</EnableCodeSigning>

still required?

If I put that in then I get another error:

Error MSB6006: "codesign" exited with code 3
William Buchanan 61 Reputation points

2022-12-22T21:33:44.22+00:00
More information. I decided to try and pair to my mac and build that way. I get an error saying 'code signing must be enabled'. I thought it was... What am I missing?

C:\Workspace\zzz\xxx>dotnet publish -f net7.0-ios15.4 -c Release /p:ArchiveOnBuild=true
MSBuild version 17.4.0+18d5aef85 for .NET
Determining projects to restore...
All projects are up-to-date for restore.
xxx -> C:\Workspace\zzz\xxx\bin\Release\net7.0-ios15.4\ios-arm64\xxx.dll
C:\Program Files\dotnet\packs\Microsoft.iOS.Sdk\16.1.1481\tools\msbuild\iOS\Xamarin.Shared.targets(2684,3): error : Code signing must be enabled to create an Xcode archive. [C:\Workspace\zzz\xxx\xxx.csproj::TargetFramework=net7.0-ios15.4]

Here is my csproj file now:

<PropertyGroup Condition="$(TargetFramework.Contains('-ios'))"> <RuntimeIdentifier>ios-arm64</RuntimeIdentifier> <CodesignEntitlement>Entitlements.plist</CodesignEntitlement> <CodesignKey>Apple Distribution: xxx (xxxxxxxx)</CodesignKey> <CodesignProvision>xxxProvisioningProfile</CodesignProvision> <EnableCodeSigning>true</EnableCodeSigning> </PropertyGroup>

EnableCodeSigning doesn't seem to make any difference doing it this way, but it causes a build failure in the Devops pipeline. I just can't help but feel there is a bug in the build process with this...
William Buchanan 61 Reputation points

2022-12-22T21:39:06.99+00:00
And another snippet of information... With this in the csproj:

<RuntimeIdentifier>ios-arm64</RuntimeIdentifier>

the Azure Devops build fails with this error:

Error : Failed to AOT compile Microsoft.Maui.dll, the AOT compiler exited with code 1

So I have to remove that just to get it to build. But then without it I get an error when doing the pair to mac.

This whole thing is an utter mess...
Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-23T02:15:17.547+00:00

From the error message, it is caused by code sign. If you have created a new distribution certificate, you can check if the provisioning profile has been updated as well. In addition, I see TargetFramework=net7.0-ios15.4, you could check if it is related to the iOS version. You want to publish to AppStore, supporting the latest iOS version is required by Apple.
Besides, you are using Azure Devops Pipeline, you can post at https://developercommunity.visualstudio.com/search?space=21 for further help.
William Buchanan 61 Reputation points

2022-12-23T02:19:18.33+00:00

Hi @Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.)

Thanks for the reply.

I have generated a new certificate and provisioning profile, and so has another team member - neither worked.

With this:

TargetFramework=net7.0-ios15.4

I'm just not clear - what should I be using?

Thanks for the tip on the Azure community. I find that it's quite inactive on there though.
Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-23T02:42:48.6+00:00

The target framework should be net6.0-ios or net7.0-ios. If you use Xcode 14.1, update VS to the latest version, the iOS version is 16.1.
At this time, publishing is only supported through the .NET command line interface, see Publish a .NET MAUI app for iOS - .NET MAUI | Microsoft Learn
Would you mind sharing the publishing command you used?
William Buchanan 61 Reputation points

2022-12-23T02:45:38.07+00:00
Thanks - will try net7.0-ios.

I am publishing through Azure Devops using this command:

task: AppStoreRelease@1
inputs:
serviceEndpoint: 'xxx App Store Connection'
releaseTrack: TestFlight
appIdentifier: 'com.xxx.xxx'
appType: iOS
appSpecificId: '111111116'
ipaPath: '$(Build.ArtifactStagingDirectory)/**/*.ipa'
shouldSkipWaitingForProcessing: false
Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-23T03:03:34.483+00:00

You can check if you can publish the app locally. For example, you can open a terminal and navigate to the folder for your .NET MAUI app project, then use the following command to create an .ipa: dotnet publish -f:net7.0-ios -c:Release /p:ServerAddress={macOS build host IP address} /p:ServerUser={macOS username} /p:ServerPassword={macOS password} /p:TcpPort=58181 /p:ArchiveOnBuild=true /p:_DotNetRootRemoteDirectory=/Users/{macOS username}/Library/Caches/Xamarin/XMA/SDKs/dotnet/
(There are several parameters, some parameters may be set in the csproj file )

Azure Devops is not supported on Q&A. For Azure Devops issue, it's recommended that you post a new one at https://developercommunity.visualstudio.com/search?space=21.
William Buchanan 61 Reputation points

2022-12-23T03:52:16.23+00:00

I just run into a bunch of other problems using the command line. Everything builds fine in Visual Studio but right now when I use the command line I get this error:

C:\Program Files\dotnet\packs\Microsoft.iOS.Sdk\16.1.1481\tools\msbuild\iOS\Xamarin.Shared.targets(1157,3): error : Sys
tem.IO.DirectoryNotFoundException: Could not find a part of the path "/Users/xxx/Library/Caches/Xamarin/mtbs/builds/xxx.xxx.EnvCore/b15f01a4a04deea63d130c9b10fc4740f50a3476dffb0be0b1a674e69c68704d/obj/Release/net7.0-ios/ios-arm64/actool
/bundle/Assets.car". [C:\Workspace\xxx\xxx.App.xxx.csproj::TargetFramework=net7.0-ios]

Looking in that folder on the mac - the actool folder isn't there for that project.
William Buchanan 61 Reputation points

2022-12-23T04:35:47.557+00:00

So, a bit of a breakthrough... I tried using the Deploy option in Visual Studio and it worked (didn't the last time I tried).

It still fails in the command line and in Azure so I still need to work out why, but at least I know that the solution itself is ok and the problem lies elsewhere.
Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-23T07:24:42.473+00:00

I tried using the Deploy option in Visual Studio and it worked

Do you get the ipa by this way?
William Buchanan 61 Reputation points

2022-12-23T07:26:19.877+00:00

Yes. It seems to be working with the Mac to make the IPA, and then publishes it to the app store.

So I guess the problem is that Azure Pipeline isn't signing the IPA when it builds it...
Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-23T07:52:20.1+00:00

Glad you solved the problem. I make a conclusion as an answer, you can check it. In this way, it will make answer searching in the forum easier and be beneficial to other community members who meets the same issue as well.

Accepted answer

0 additional answers

Your answer

Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-22T06:25:23.217+00:00

You got this error locally not from Devops , right? Usually this error ( Asset Validation Failed (90034) Missing or Invalid signature ) means invalid CodesignProvision, you could try check if the distribution certificate was expired and check the AppleWWDRCA in Keychain.
William Buchanan 61 Reputation points

2022-12-22T08:00:21.657+00:00

Hi @Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.)

Thanks for the reply.

I made a new certificate and had the same problem. Also the Apple WWDRCA was freshly installed.

Any other thoughts?

Thanks
Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-22T09:06:31.403+00:00

Would you mind sharing the detailed error message? Does it point to any libraries?
Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-22T09:12:38.23+00:00

You want to publish a .net7 iOS app according to the official doc- Publish a .NET MAUI app for iOS - .NET MAUI | Microsoft Learn, right? What's the Xcode version and VS version are you using?
William Buchanan 26 Reputation points

2022-12-22T09:32:57.667+00:00

2022-12-21 14:42:45.805 * Error: Validation failed for 'xxxx.ipa'.
2022-12-21 14:42:45.805 * Error: Asset validation failed Missing or invalid signature. The bundle 'xxx.xxx.xxx' at bundle path 'Payload/xxxxapp' is not signed using an Apple submission certificate. (ID: d5bffa20-9a19-4975-b842-7befce98b52d) (90034)
{
NSLocalizedDescription = "Asset validation failed";
NSLocalizedFailureReason = "Missing or invalid signature. The bundle 'xxx.xxx.xxx' at bundle path 'Payload/xxxx.app' is not signed using an Apple submission certificate. (ID: d5bffa20-9a19-4975-b842-7befce98b52d)";
"original_server_error" = {
code = "STATE_ERROR.VALIDATION_ERROR.90034";
detail = "Missing or invalid signature. The bundle 'xxx.xxx.xxx' at bundle path 'Payload/xxxx.app' is not signed using an Apple submission certificate.";
id = "d5bffa20-9a19-4975-b842-7befce98b52d";
status = 409;
title = "Asset validation failed";
};
}
William Buchanan 61 Reputation points

2022-12-22T09:36:01.62+00:00

That is right, but I am deploying from an Azure Devops Pipeline (so not from VS). I have no idea what XCode version is (does it even use XCode?). VS version is 17.4.3.
William Buchanan 61 Reputation points

2022-12-22T09:39:09.783+00:00

Just to clarify - I got this error by running altool –validate-app with the ipa file built by Devops
William Buchanan 61 Reputation points

2022-12-22T19:35:56.3+00:00

Someone else just regenerated the certs on a different mac and having the same problem.
William Buchanan 61 Reputation points

2022-12-22T20:39:39.083+00:00

Question - Is :

<EnableCodeSigning>true</EnableCodeSigning>

still required?

If I put that in then I get another error:

Error MSB6006: "codesign" exited with code 3
William Buchanan 61 Reputation points

2022-12-22T21:33:44.22+00:00

More information. I decided to try and pair to my mac and build that way. I get an error saying 'code signing must be enabled'. I thought it was... What am I missing?

C:\Workspace\zzz\xxx>dotnet publish -f net7.0-ios15.4 -c Release /p:ArchiveOnBuild=true
MSBuild version 17.4.0+18d5aef85 for .NET
Determining projects to restore...
All projects are up-to-date for restore.
xxx -> C:\Workspace\zzz\xxx\bin\Release\net7.0-ios15.4\ios-arm64\xxx.dll
C:\Program Files\dotnet\packs\Microsoft.iOS.Sdk\16.1.1481\tools\msbuild\iOS\Xamarin.Shared.targets(2684,3): error : Code signing must be enabled to create an Xcode archive. [C:\Workspace\zzz\xxx\xxx.csproj::TargetFramework=net7.0-ios15.4]

Here is my csproj file now:

<PropertyGroup Condition="$(TargetFramework.Contains('-ios'))"> <RuntimeIdentifier>ios-arm64</RuntimeIdentifier> <CodesignEntitlement>Entitlements.plist</CodesignEntitlement> <CodesignKey>Apple Distribution: xxx (xxxxxxxx)</CodesignKey> <CodesignProvision>xxxProvisioningProfile</CodesignProvision> <EnableCodeSigning>true</EnableCodeSigning> </PropertyGroup>

EnableCodeSigning doesn't seem to make any difference doing it this way, but it causes a build failure in the Devops pipeline. I just can't help but feel there is a bug in the build process with this...
William Buchanan 61 Reputation points

2022-12-22T21:39:06.99+00:00

And another snippet of information... With this in the csproj:

<RuntimeIdentifier>ios-arm64</RuntimeIdentifier>

the Azure Devops build fails with this error:

Error : Failed to AOT compile Microsoft.Maui.dll, the AOT compiler exited with code 1

So I have to remove that just to get it to build. But then without it I get an error when doing the pair to mac.

This whole thing is an utter mess...
Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-23T02:15:17.547+00:00

From the error message, it is caused by code sign. If you have created a new distribution certificate, you can check if the provisioning profile has been updated as well. In addition, I see TargetFramework=net7.0-ios15.4, you could check if it is related to the iOS version. You want to publish to AppStore, supporting the latest iOS version is required by Apple.
Besides, you are using Azure Devops Pipeline, you can post at https://developercommunity.visualstudio.com/search?space=21 for further help.
William Buchanan 61 Reputation points

2022-12-23T02:19:18.33+00:00

Hi @Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.)

Thanks for the reply.

I have generated a new certificate and provisioning profile, and so has another team member - neither worked.

With this:

TargetFramework=net7.0-ios15.4

I'm just not clear - what should I be using?

Thanks for the tip on the Azure community. I find that it's quite inactive on there though.
Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-23T02:42:48.6+00:00

The target framework should be net6.0-ios or net7.0-ios. If you use Xcode 14.1, update VS to the latest version, the iOS version is 16.1.
At this time, publishing is only supported through the .NET command line interface, see Publish a .NET MAUI app for iOS - .NET MAUI | Microsoft Learn
Would you mind sharing the publishing command you used?
William Buchanan 61 Reputation points

2022-12-23T02:45:38.07+00:00

Thanks - will try net7.0-ios.

I am publishing through Azure Devops using this command:

task: AppStoreRelease@1
inputs:
serviceEndpoint: 'xxx App Store Connection'
releaseTrack: TestFlight
appIdentifier: 'com.xxx.xxx'
appType: iOS
appSpecificId: '111111116'
ipaPath: '$(Build.ArtifactStagingDirectory)/**/*.ipa'
shouldSkipWaitingForProcessing: false
Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-23T03:03:34.483+00:00

You can check if you can publish the app locally. For example, you can open a terminal and navigate to the folder for your .NET MAUI app project, then use the following command to create an .ipa: dotnet publish -f:net7.0-ios -c:Release /p:ServerAddress={macOS build host IP address} /p:ServerUser={macOS username} /p:ServerPassword={macOS password} /p:TcpPort=58181 /p:ArchiveOnBuild=true /p:_DotNetRootRemoteDirectory=/Users/{macOS username}/Library/Caches/Xamarin/XMA/SDKs/dotnet/
(There are several parameters, some parameters may be set in the csproj file )

Azure Devops is not supported on Q&A. For Azure Devops issue, it's recommended that you post a new one at https://developercommunity.visualstudio.com/search?space=21.
William Buchanan 61 Reputation points

2022-12-23T03:52:16.23+00:00

I just run into a bunch of other problems using the command line. Everything builds fine in Visual Studio but right now when I use the command line I get this error:

C:\Program Files\dotnet\packs\Microsoft.iOS.Sdk\16.1.1481\tools\msbuild\iOS\Xamarin.Shared.targets(1157,3): error : Sys
tem.IO.DirectoryNotFoundException: Could not find a part of the path "/Users/xxx/Library/Caches/Xamarin/mtbs/builds/xxx.xxx.EnvCore/b15f01a4a04deea63d130c9b10fc4740f50a3476dffb0be0b1a674e69c68704d/obj/Release/net7.0-ios/ios-arm64/actool
/bundle/Assets.car". [C:\Workspace\xxx\xxx.App.xxx.csproj::TargetFramework=net7.0-ios]

Looking in that folder on the mac - the actool folder isn't there for that project.
William Buchanan 61 Reputation points

2022-12-23T04:35:47.557+00:00

So, a bit of a breakthrough... I tried using the Deploy option in Visual Studio and it worked (didn't the last time I tried).

It still fails in the command line and in Azure so I still need to work out why, but at least I know that the solution itself is ok and the problem lies elsewhere.
Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-23T07:24:42.473+00:00

I tried using the Deploy option in Visual Studio and it worked

Do you get the ipa by this way?
William Buchanan 61 Reputation points

2022-12-23T07:26:19.877+00:00

Yes. It seems to be working with the Mac to make the IPA, and then publishes it to the app store.

So I guess the problem is that Azure Pipeline isn't signing the IPA when it builds it...
Wenyan Zhang (Shanghai Wicresoft Co,.Ltd.) 36,436 Reputation points Microsoft External Staff

2022-12-23T07:52:20.1+00:00

Glad you solved the problem. I make a conclusion as an answer, you can check it. In this way, it will make answer searching in the forum easier and be beneficial to other community members who meets the same issue as well.

Answer 1

Hello,

As you said, you can use VS for Mac to make the ipa. For more detais, refer to the official doc- Publish a .NET MAUI app for iOS - .NET MAUI | Microsoft Learn

So I guess the problem is that Azure Pipeline isn't signing the IPA when it builds it

Azure Devops is not supported on Q&A. For Azure Devops issue, it's recommended that you post at https://developercommunity.visualstudio.com/search?space=21.

Best Regards,
Wenyan Zhang

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Share via

Asset Validation Failed (90034) Missing or Invalid signature

0 additional answers

Your answer