Publish Enterprise Apps

This page explains how to use a MagLoft-built enterprise App and re-sign it using your own Apple Enterprise credentials.

Introduction

You can build iOS Apps for publishing within your organization, using the Apple Enterprise Developer Program. For In-house distributions, we can generate an un-signed .ipa file for you, which you can then re-sign using your own enterprise developer certificate. This allows you to securely distribute apps for internal use.

Requirements

1. Enroll with the Apple Enterprise Program.

2. Install the latest version of XCode.

3. Install Apple root certificates to your Keychain.

4. Install the XReSign application.

5. Request a custom enterprise app build (.ipa) from MagLoft.

Re-Signing Guide

1. Create distribution certificate

1. Open the Apple Developer Portal and navigate to the Certificates page.

2. Re-use an existing or create a new "In-House and Ad Hoc" distribution certificate. If you re-use an existing certificate, make sure that you have both the certificate and the private key installed in your Keychain.

3. Download the generated distribution certificate and install it to you Keychain.

2. Create app identifiers

1. Open the Apple Developer Portal and navigate to the Identifiers page.

2. Create a new Identifier and choose "App IDs".

3. Choose an explicit Bundle ID. We recommend using the following format:com.company.publication

4. For Capabilities, enable "Push Notifications" and follow the instructions in case you would like to use Push Notifications with your App.

5. Repeat steps 1. to 4. for an additional Bundle ID, adding .NSE to the end of the previously chose bundle ID, e.g. com.company.publication.NSE

3. Create Provisioning Profiles

1. Open the Apple Developer Portal and navigate to the Profiles page.

2. Create a new Profile and choose "Distribution > In House".

3. Choose the first Bundle ID you have created in Step 2. Create app identifiers.

4. Select the correct distribution certificate you have selected / created in 1. Create distribution certificate.

5. Download the Provisioning Profile and install it using XCode.

6. Repeat steps 1. to 5. for your second Bundle ID ending in .NSE

4. Re-Sign the MagLoft App (.ipa)

Make sure you have all certificates and profiles from steps 1. to 3. You should have the following ready:

1. MagLoft App: app.ipa

2. Provisioning Profile 1 and 2: *.mobileprovision

3. The Distribution Certificate imported into your Keychain

Now, open the XReSign.app application and choose the following settings:

1. Choose the MagLoft App (app.ipa)

2. Choose the first Provisioning Profile (without the .NSE ending)

3. Choose 'Change BundleId' and type in your selected bundle identifier (without the .NSE ending)

4. Select either the Login or System keychain, and find your distribution certificate in the list. It should be called "iPhone Distribution: Company Name".

5. Finally, click on "ReSign" to sign the App.

Using the Signed App

With the above steps completed, you should find the signed App (.ipa) in the same folder where you chose the app.ipa from.

This App is now signed using your Apple Enterprise Credentials and ready to be distributed in your organization.