asc-signing-setup

1# asc signing setup
2 
3Use this skill when you need to create or renew signing assets for iOS/macOS apps.
4 
5## Preconditions
6- Auth is configured (`asc auth login` or `ASC_*` env vars).
7- You know the bundle identifier and target platform.
8- You have a CSR file for certificate creation, or you will let `asc certificates create --generate-csr` create one.
9 
10## Workflow
111. Create or find the bundle ID:
12   - `asc bundle-ids list --paginate`
13   - `asc bundle-ids create --identifier "com.example.app" --name "Example" --platform IOS`
142. Configure bundle ID capabilities:
15   - `asc bundle-ids capabilities list --bundle "BUNDLE_ID"`
16   - `asc bundle-ids capabilities add --bundle "BUNDLE_ID" --capability ICLOUD`
17   - Add capability settings when required:
18     - `--settings '[{"key":"ICLOUD_VERSION","options":[{"key":"XCODE_6","enabled":true}]}]'`
19   - For the Developer Portal-only `PRIVATE_CLOUD_COMPUTE` capability, use a
20     user-owned web session and the Developer Portal Bundle ID resource ID:
21     - `asc web bundle-ids capabilities enable --bundle-id "BUNDLE_RESOURCE_ID" --capability PRIVATE_CLOUD_COMPUTE --confirm`
22     - This capability is not available through the public App Store Connect
23     capability enum. If the cached session cannot access Developer Portal,
24       clear its scoped cache, then log in again with the same binary:
25       - `asc web auth logout --apple-id "user@example.com"`
26       - `asc web auth login --apple-id "user@example.com"`
27…