KeyKeeperApple Developer ID · Installer
How an agent gets a Apple Developer ID · Installer key through KeyKeeper, what to choose on developer.apple.com, and how KeyKeeper verifies it.
| Template id | developer-id-installer (also productsign) |
|---|---|
| Field | signing-identity · signing identity in the macOS Keychain |
| Key looks like | whether it can be viewed again is unconfirmed |
| Created at | developer.apple.com |
| Verified by KeyKeeper | not verified |
| Template checked | 2026-09-15 |
This is a signing identity that stays in the macOS Keychain. KeyKeeper stores no private key material for it; the template only records where Apple manages it.
What only you can do
Sign in to Apple Developer
Choose Developer ID Installer
Create it from a CSR whose private key remains on this Mac
What to choose
Use Installer only for signed installer packages. Application binaries require the separate Developer ID Application identity.
The agent is told the same thing. It opens the page for you and says what to pick; it never logs in, passes 2FA or pays on your behalf.
Rotation and expiry
The Apple-issued certificate has an expiration date; record it on the credential. Rotate or revoke at developer.apple.com.