Search code examples
iosiphonecertificateprovisioning-profile

Apple Enterprise Distribution Certificate and Profile expiration logic


Recently, I had an experience of expiring profile & certificate and my all distributed apps were stopped running. So i want to go in depth of this logic. I have few question listed below. Anyone please answer because most iOS developers still don't know the answers.

  1. Why apple is expiring certificates and profiles exact after one year ?

  2. Can we extend the limit of expiration year from one year to any ?

  3. How iOS decide, The particular app certificate is expired so it should not be run in the device ?

  4. When installed app life is deciding by iOS i.e. When app is installed first time OR when Certificates and Profiles created ?

Most iOS developers are wondering for knowing the logic behind this certificate expiration process so please answer who knows the truth behind this.

Thanks in advance.


Solution

  • Why apple is expiring certificates and profiles exact after one year ?

    So that you don't set up a parallel app store(IMO)

    Can we extend the limit of expiration year from one year to any ?

    For Enterprise licenses, 'in-house' distribution profiles have a validity of 3 years. Here is an old thread you may refer.

    How iOS decide, The particular app certificate is expired so it should not be run in the device ?

    From Apple docs: The first time an application is opened on a device, the distribution certificate is validated by contacting Apple’s OCSP server. Unless the certificate has been revoked, the app is allowed to run.

    When installed app life is deciding by iOS i.e. When app is installed first time OR when Certificates and Profiles created ?

    Same as above, certificate and PP expiry dates are taken in account before running the app. Try installing an app which was signed with old certificate and you'd see.()