Hi everyone,
I’m trying to notarize a macOS app for direct distribution in Xcode. The upload finished, but the notarization has been stuck on “In Progress” for hours. I’m not getting any emails or errors, and the status log in Organizer only shows the same “In Progress” message without any extra details.
I tried reopening Organizer and creating a new archive, but it always ends up in the same state.
Is this normal, or is there something I should check on my side? Any help would be appreciated.
Thanks!
Notarization
RSS for tagNotarization is the process of scanning Developer ID-signed software for malicious components before distribution outside of the Mac App Store.
Selecting any option will automatically load the page
Post
Replies
Boosts
Views
Activity
Unable to notarize Electron-based application. All notarization attempts fail with
"The signature of the binary is invalid" for main executable and Electron Framework,
despite passing local codesign verification.
ENVIRONMENT:
macOS: 24.6.0 (Sequoia)
Hardware: Apple M4 Max (arm64)
electron-builder: 26.0.12
Electron: 36.9.5 (also tested 37.10.2, 38.2.0)
Certificate: Developer ID Application: AS LIVE MEDIA SP Z O O
Team ID: 2KJ532SU3G
Certificate validity: Oct 7 2025 - Oct 8 2030
PROBLEM:
Every notarization submission fails with identical error for two binaries:
Contents/MacOS/PresentClic Desktop
Contents/Frameworks/Electron Framework.framework/Versions/A/Electron Framework
Error message: "The signature of the binary is invalid."
Architectures affected: Both x86_64 and arm64
CRITICAL CONTRADICTION:
✅ Local verification PASSES:
$ codesign --verify --deep --strict "PresentClic Desktop.app"
Result: valid on disk, satisfies Designated Requirement
❌ Apple notarization service FAILS:
Error: "The signature of the binary is invalid"
LATEST SUBMISSION ID: 11e1a452-4ea7-4562-ac8e-5e76c39eeb6c
Local verification output shows all components validated:
Electron Framework: validated ✅
All helper apps: validated ✅
All frameworks: validated ✅
Main executable: valid on disk ✅
Authority chain: Developer ID Application → Developer ID CA → Apple Root CA ✅
Timestamp: Present ✅
Runtime Version: 15.4.0 ✅
CONFIGURATION:
Entitlements (build/entitlements.mac.plist):
com.apple.security.cs.allow-jit: true
com.apple.security.cs.allow-unsigned-executable-memory: true
com.apple.security.cs.disable-library-validation: true
com.apple.security.cs.allow-dyld-environment-variables: true
com.apple.security.automation.apple-events: true
Standard device/network/file entitlements
Build configuration:
hardenedRuntime: true
gatekeeperAssess: false (tested both true and false)
entitlements and entitlementsInherit: properly configured
TROUBLESHOOTING STEPS ATTEMPTED (ALL FAILED):
✅ Updated electron-builder from 24.13.3 to 26.0.12
✅ Downgraded Electron 38 → 37 → 36
✅ Tested x86_64 and arm64 separately
✅ Regenerated certificate via Xcode (new cert generated 23/11/2025)
✅ Configured App Store Connect API for notarization
✅ Tested multiple entitlements combinations
✅ Manual component-by-component re-signing
✅ Removed all metadata files (._ files)
✅ Tested both ZIP and DMG formats
✅ Automatic electron-builder notarization
✅ Manual notarization via xcrun notarytool
✅ Custom afterSign hooks for re-signing
✅ gatekeeperAssess true and false
✅ Clean builds (removed dist/ directory)
ALL attempts result in identical failure. Local codesign verification ALWAYS passes.
QUESTIONS:
Why does local codesign --verify pass but Apple notarization service fails?
Is there a known issue with Electron Framework notarization on macOS Sequoia +
Apple Silicon?
3. Are there undocumented requirements for Electron apps that could cause this?
4. Could this be a bug in the notarization service for this specific configuration?
ADDITIONAL CONTEXT:
Multiple notarization attempts over 24+ hours
Different certificates, configurations, architectures - all fail identically
No similar reports found in forums or GitHub issues
Application functions correctly when Gatekeeper is bypassed
This is blocking production distribution to macOS users
This appears to be either:
A bug in Apple notarization service for Electron apps
An incompatibility between electron-builder 26 + Electron 36/37 + macOS Sequoia +
Apple Silicon
The fact that local verification passes but notarization fails suggests the issue is
with the notarization service validation logic, not the actual code signatures.
REQUEST:
Need guidance on resolving this issue. Standard documentation and troubleshooting
steps have not resolved the problem.
Thank you for any assistance. Staszek Pliszko
Topic:
Code Signing
SubTopic:
Notarization
Error 7000 "Team is not yet configured for notarization" - Cannot notarize any apps
I'm trying to notarize macOS apps for Developer ID distribution and consistently getting error 7000 on every submission.
Error Details:
{
"status": "Rejected",
"statusSummary": "Team is not yet configured for notarization. Please contact Developer Programs Support at developer.apple.com under the topic Development and Technical / Other Development or Technical Questions.",
"statusCode": 7000
}
What I've tried:
Completed enrollment verification
Created new App Store Connect API key with Admin access
Created fresh App-Specific Password
Submitted via both API key and App-Specific Password authentication
All submissions are accepted and uploaded successfully, but after processing they're rejected with error 7000
Technical Details:
Active Developer ID Application certificate
Hardened runtime enabled
Apps are properly code-signed (codesign -vvv passes)
Behavior:
Over 15 submissions since December 2nd - ALL rejected with the same error 7000. The submissions upload successfully and show "In Progress" for extended periods (sometimes hours) before eventually being rejected.
Questions:
Has anyone encountered error 7000 and resolved it? What was the fix?
Are there any account settings or agreements required specifically for notarization that aren't obvious in the developer portal?
Should I contact Apple Developer Support directly, or is there a self-service solution?
Any guidance would be greatly appreciated.
Dear support team,
is it possible to rename a notarized ZIP package and not to loose the notarized status?
One of our ZIP package contains resources and binaries which are code signed. The archive itself is accepted after submitting and uploading during the notarization process (online notarization).
Unfortunately, the ZIP cannot be stapled (offline verification). So, is the filename part of the notarized ZIP package or can a ZIP package be renamed?
Best regards,
Stefan
i encountered an error when i distributing my app on xcode 26.0.1. Below is error log.
{
"logFormatVersion": 1,
"jobId": "ed2b622b-61f6-4c8a-90b7-7c3cdfbafc7a",
"status": "Rejected",
"statusSummary": "Team is not yet configured for notarization. Please contact Developer Programs Support at developer.apple.com under the topic Development and Technical / Other Development or Technical Questions.",
"statusCode": 7000,
"archiveFilename": "mychm.zip",
"uploadDate": "2025-12-10T01:50:34.198Z",
"sha256": "b61e224154823c8e06c3db904d67a78969f1564c7602f1fa77335fdd12a8d22b",
"ticketContents": null,
"issues": null
}
I'm currently observing a problem similar to this thread https://developer.apple.com/forums/thread/737334
The difference is that this is happening after updating a system extension.
Basically same error, sysextd complains it can not check that the system extension is notarized: macOS Error 3 + Error code=-67050.
I think macOS (Sequoia 15.3.2 or 15.7.2 if it matters) is wrong in this case for the following reasons:
when using spctl assess -t install, the system extension is reported to be correctly notarized.
when restarting the Mac, the updated system extension is correctly checked and staged.
if I run spctl assess before sysextd tries to check the system extension, it works.
I'm currently thinking of 2 reasons why the check does not work:
sysextd is somehow trying to work with a cached assessment that has become invalid after the system extension was updated.
macOS needs way more time between the update of the files and the request to update the staged extension. I tried adding a 5-second delay. This does not seem to work or at least reliably.
I tried just touching the system extension, no positive result. Unfortunately, in macOS Sequoia, it is not possible anymore to reset-default using spctl and see if it solves the issue, at least the next time the update is performed.
[Q] Is there some magic operation that would help macOS correctly check the notarization of an updated system extension?
We package a nightly build of our application for distribution. About 1 month ago, this package has started showing the "Apple could not verify 'Application' is free of malware" message.
This only happens to our development branch package. We run the same pipeline with the same signature for our stable branch and the stable package does not show this message.
$ codesign -dv --verbose=4 KiCad.app
Executable=/Applications/KiCad/KiCad/KiCad.app/Contents/MacOS/kicad
Identifier=org.kicad.kicad
Format=app bundle with Mach-O universal (x86_64 arm64)
CodeDirectory v=20500 size=51931 flags=0x10000(runtime) hashes=1612+7 location=embedded
VersionPlatform=1
VersionMin=722432
VersionSDK=983552
Hash type=sha256 size=32
CandidateCDHash sha256=4f15435c1d3cc056a83432b78a2f6acae8fb0e6d
CandidateCDHashFull sha256=4f15435c1d3cc056a83432b78a2f6acae8fb0e6d03cbe70641719fd1ced3395b
Hash choices=sha256
CMSDigest=4f15435c1d3cc056a83432b78a2f6acae8fb0e6d03cbe70641719fd1ced3395b
CMSDigestType=2
Executable Segment base=0
Executable Segment limit=3915776
Executable Segment flags=0x1
Page size=4096
CDHash=4f15435c1d3cc056a83432b78a2f6acae8fb0e6d
Signature size=9002
Authority=Developer ID Application: KiCad Services Corporation (9FQDHNY6U2)
Authority=Developer ID Certification Authority
Authority=Apple Root CA
Timestamp=Dec 19, 2025 at 5:21:05 AM
Info.plist entries=17
TeamIdentifier=9FQDHNY6U2
Runtime Version=15.2.0
Sealed Resources version=2 rules=13 files=37238
Internal requirements count=1 size=176
codesign --verify --verbose=4 KiCad.app
<snipped all libs validated>
KiCad.app: valid on disk
KiCad.app: satisfies its Designated Requirement
% spctl --assess --verbose=4 KiCad.app
KiCad.app: accepted
source=Notarized Developer ID
We distribute this via dmg. The notarization ticket is stapled to the dmg and the dmg opens without warning.
Any help would be appreciated
I am trying to notarize a VS-Code Fork Electron based app for non-App store distribution. Its just same for more than 24hrs, it just says processing. Looking for someone who could help me.
Thanks
I have been waiting well over 24 hours for my notarization to occur, and nothing - no "we might take a while if it is your first app" or any mention of that in the docs.
So why is it taking this long? What's the hold up???
If this is part of the process, Apple should officially document it, so developers aren't left resubmitting and wondering. This is not a good first experience with the developer program.
Successfully received submission history.
history
--------------------------------------------------
createdDate: 2026-01-07T05:22:34.038Z
name: URSAMajorSpaceStationSST206_v1.0.0.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-01-06T01:55:05.144Z
name: URSAMajorSpaceStationSST206_v1.0.0.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-01-05T20:55:50.624Z
name: test.zip
status: Invalid
--------------------------------------------------
createdDate: 2026-01-05T20:32:52.944Z
name: URSAMajorSpaceStationSST206.vst3.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-01-05T19:37:15.426Z
name: URSAMajorSpaceStationSST206.component.zip
status: In Progress
--------------------------------------------------
createdDate: 2026-01-05T18:37:43.101Z
name: URSAMajorSpaceStationSST206.component.zip
status: In Progress
Topic:
Code Signing
SubTopic:
Notarization
The process has been stuck "In Progress" for 8 days now. We had a scheduled New Year Offer for our software that would run based around this important new update, and obviously we missed it because of this crazy issue. Notarization used to take a few seconds. Now it does not work, neither on my newly set up Mac, nor in my old (completely unchanged) one.
My company and finances are totally frozen at this point due to this issue. PLEASE help, look into my actual account and do what is needed!
Topic:
Code Signing
SubTopic:
Notarization
I have two Macs, desktop and laptop. Since they both belong to me, they both sign in with the same Apple account. I find that if I sign and notarize an app on one, the other must be powered off. Otherwise, notarization will fail.
Is this intentional? If so, what is the rationale? Is there a way to fix or avoid it?
Both systems run macOS Tahoe with the latest updates. Both are set up the same way for signing using the same certificates. The build process is identical on each.
Topic:
Code Signing
SubTopic:
Notarization
Hi, I'm running into a weird notarization issue and wanted to see if anyone else has seen something similar.
I have one main macOS app that keeps doing the following:
The notarization sits in "In Progress" for a few days
Then it flips to "Rejected" with error code 7000
The notarytool log shows no issues and no ticket info
At the same time, smaller test apps on the same Apple Developer account notarize. They do take around 2-3 days though.
So it doesn't seem like an account or certificate problem. It looks like something about this specific app causes it to go into a long review and then fail with that vague 7000 error.
The app is fairly large (Python + Qt, lots of bundled libraries), so I'm wondering if that triggers deeper scanning or some kind of policy check.
Has anyone else seen:
Multi day notarization jobs?
Error 7000 that only affects one particular app?
Rejections with no "issues" listed?
If so, did you find a way around it?
Also for context, my Apple Developer account was created recently
I have contacted Apple Support already but no response yet and it's been 6 days.
Thanks!
Topic:
Code Signing
SubTopic:
Notarization
Hi, I have an app built in Unity that I am trying to sign an notarize for distribution. I can successfully codesign the app and it runs properly. But after successfully notarizing the app, the app stops opening.
My process is as follows:
# codesign the app. omitting "--deep" "--option runtime" or both will result in notarization failing
codesign --force --deep --verify --verbose --option runtime --sign "Developer ID Application: ORG NAME (ZZZZZZZZZ)" path/to/app.app
# create notarization submission zip
/usr/bin/ditto -c -k --keepParent path/to/app.app path/to/app.zip
# submit for notarization
xcrun notarytool submit --wait path/to/app.zip -v --apple-id apple@id.com --password "aaaa-aaaa-aaaa-aaaa" --team-id "ZZZZZZZZZ"
Notarization seems to succeed. Running:
spctl -a -vvv -t install path/to/app.app
-returns:
path/to/app.app: accepted
source=Notarized Developer ID
origin=Developer ID Application: JOHN DOE (ZZZZZZZZZ)
The Problem:
Before code signature, the app runs normally
After code signature, the app runs normally
After notarization, the app hangs indefinitely on opening. It stays in the Dock until force quit. The app does not create its main window. There are no Gatekeeper warnings or pop-up windows.
Additional Information:
The second time I attempt to open the application I get a pop-up warning me that the app was force-quit while opening windows.
This happens whether or not I have used xcrun stapler to staple the notarization to the app
This happens whether I run the app from the terminal, by double clicking on the .app package, or by running the Unix Executable within Contents/MacOS/
Any idea how I can debug this and figure out what's going wrong? Any help would be greatly appreciated.
We are trying to notarize a MacOS app on our paid developer business account for the past 3 weeks. After many hours of processing, we received the following error:
Team is not yet configured for notarization. Please contact Developer Programs Support at developer.apple.com under the topic Development and Technical / Other Development or Technical Questions.", "statusCode": 7000,
Has anyone else experienced this issue and if so, how was it resolved?
We have reached out to support to ask them to enable this configuration and received no reply.
Any advice or guidance would be appreciated.
These have been stuck in progress for a long time. Usually this process is fairly quick for this app:
id: 92caae7f-1796-4928-bb35-72f5f2667786
id: 3645e93f-a8ac-4826-8a4a-690f980dde8e
id: 3645e93f-a8ac-4826-8a4a-690f980dde8e
What can be done, it is holding back deployments :(
Topic:
Code Signing
SubTopic:
Notarization
I’m trying to notarize an Electron app for distribution outside the Mac App Store, but every submission is rejected with error 7000.
Team Details:
Team ID: P3HATASMP9
Organization: Rose Ai Labs, Inc.
Role: Account Holder
Apple Developer Program: Active membership
Certificate:
Type: Developer ID Application
Identity: “Developer ID Application: Rose Ai Labs, Inc. (P3HATASMP9)”
Status: Valid in Keychain Access with full certificate chain
App Details:
Platform: macOS (Electron)
Hardened runtime: Enabled
Code signing: Successful (codesign -v passes)
Submission History (all rejected with same error):
Jan 20, 2026: d2f5e812-d443-4858-895e-ca9828f65d6b
Jan 20, 2026: 4864e851-99d4-49df-87b8-22a6b280f4fc
Jan 21, 2026: 69b177bd-5f08-4363-a2bb-1d286dd9f047
Jan 21, 2026: a181071b-e874-4794-90f3-c172b112900e
Jan 21, 2026: ae3ec87f-60da-4826-91df-a247cd4fd46f
Jan 21, 2026: b7165e2f-19a8-4d4a-9e00-21e85550ec8b
Jan 24, 2026: 2b83d46d-6606-450f-9ffe-cbfa0f0bf179
Jan 27, 2026: ed8ba49c-b24f-422b-9271-44dff805fb61
Error from notarytool log:
status: Rejected
statusCode: 7000
statusSummary: Team is not yet configured for notarization. Please contact Developer Programs Support at developer.apple.com under the topic Development and Technical / Other Development or Technical Questions.
What I’ve verified:
Developer ID certificate is valid and trusted
Apple Worldwide Developer Relations Certification Authority chain is complete
App is properly code-signed with hardened runtime
Using notarytool with valid credentials (submission uploads successfully)
Account Holder role with full permissions
Existing support case: 102808512705
I’ve had this issue for over a week with no resolution. The error message says “Team is not yet configured for notarization” which suggests something needs to be enabled on Apple’s side. Has anyone encountered this and found a resolution?
Hi,
we are sending MacOS apps packaged in a ZIP archive or DMG disk image to the Notary Service.
Before we send the app for notarization, we check the code signature via command
codesign -vvv --deep --strict /path/to/app_or_bundle
The result is positive and it does not provide any gaps.
(And yes, we are following the inside out code signing approach, mentioned at Using the codesign Tool's --deep Option Correctly)
Unfortunately, the result of the Notary service provided that one file has no signature, which was not detected by the signature verification command.
The path of the binary was in
<app_name>.app.zip/<app_name>.app/Contents/Resources/inst/<binary>
How I can be verify like a the Notary service does it on our side?
Best regards,
Stefan
I am trying to notarize my app but it rejected with this error after 5 days of being in progress.
{
"logFormatVersion": 1,
"jobId": "8291ad9e-4c8e-4974-8753-af1a78e5a4a2",
"status": "Rejected",
"statusSummary": "Team is not yet configured for notarization. Please contact Developer Programs Support at developer.apple.com under the topic Development and Technical / Other Development or Technical Questions.",
"statusCode": 7000,
"archiveFilename": "SkanVirtualAssistant-1.0.0.dmg",
"uploadDate": "2026-02-05T03:13:41.280Z",
"sha256": "eb95cc25a382e5ce36fc2b7e195c20a1a09cfbfb71a057e754306ad400300d38",
"ticketContents": null,
"issues": null
}
Can anyone help with this? I have an urgent product launch deadline in a week! I have contacted developer program support but have received no response.
I've submitted a few first notarizations for my electron app - I've verified with all the QA and resources that I am doing the correct thing - but its silently just holding all my notarization requests on apples side with no logs. I'm trying to launch my app this week - how should I proceed?
Topic:
Code Signing
SubTopic:
Notarization
I've tried to notarize my app recently and got the error:{
"logFormatVersion": 1,
"jobId": "...",
"status": "Rejected",
"statusSummary": "Team is not yet configured for notarization",
"statusCode": 7000,
"archiveFilename": "myapp.dmg",
"uploadDate": "2019-06-20T06:24:53Z",
"sha256": "...",
"ticketContents": null,
"issues": null
}I've never heard about "team configuration for notarization" previously. What are the steps to resolve that issue?Thanks in advance.