Sign or Re-sign the iOS MTP Mobile App

To use MTP Mobile App on iOS after you have downloaded it from MTP Manager, first sign it using these steps.

To re-sign an app, skip to Re-sign the iOS MTP Mobile App.

Important: If you are deploying the app using an EMM connection directly to the App Store, you do not have to sign the app. These steps are only for apps downloaded from MTP Manager.

Prior to Signing

Before you sign the app, make sure you have:

An Apple Developer Enterprise Account.
An Apple Mac computer with OS 10, including the Xcode command-line tools. If you do not have proper command-line tools, MacOS will prompt you to download during the re-sign step.
For direct install (Non-EMM) and MobileIron Deployments: Contact your CSM for your plist authentication file.

If you are updating to a new version of the Appthority iOS Mobile Agent, skip to Step 7 under Register App ID.

Sign the App

The following sections step you through signing the MTP Mobile App for iOS:

Register the App ID
Create the Developer Certificate
Get the iOS In-house Provisioning Profile
Create the VoIP Certificate

Then:

Upload the VoIP Certificate and Get Deployment Files

To register the App ID

Sign in to your organization's Apple iOS Developer Enterprise Program account and go to Certificates, IDs & Profiles.
Ensure that the drop-down has iOS, tvOS, watchOS selected, and click through to Identifiers > App IDs.
Click Add (the + icon) in the upper right to create a new iOS App ID.
Under the App ID Description section, name your Appthority app, for example "MTP Mobile App".
Check the Explicit App ID button, and name the Bundle ID as follows:
com.appthority.Appthority.Enterprise.[your company name]
Record the AppID for use in upcoming steps.
Under App Services, check the box next to Push Notifications to enable this service.
Scroll down and click Continue.
Confirm the information and click Register.

To create the Developer Certificate

Within Certificates, IDs & Profiles > Certificates, click Add (the + icon) in top right corner to create a new certificate.
Under Development, select iOS App Development, and click Continue.
Follow the on-screen steps to create a CSR file for the developer certificate.
Tip: A best practice in the Common Name field is to name the Private Key "MTP Mobile App Developer Key".
Download and save the Certificate file to your Mac, and click Continue.
Go to the local certificate file you just saved, and double-click it to install it to Keychain Access.
Click Done.

To get the iOS In-house Provisioning Profile

In Certificates, IDs & Profiles > Provisioning Profiles > Distribution, click Add (the + icon).
In the Distribution section, select In-House, then click Continue.
From the App ID dropdown, select the App ID created previously and click Continue.
Select your organization’s iOS distribution certificate and click Continue.
Enter a name for the new Provisioning Profile, for example "MTP_Mobile_App_Distribution", and click Continue.
Download the new Provisioning Profile to your Mac.

To create the VoIP Certificate

In Apple Developer Enterprise Program > Overview > Certificates, Identifiers & Profiles > iOS Apps > Certificates, click Add (the + icon).
In the Production section, select VoIP Services Certificate and click Continue.
From the App ID dropdown, select the App ID previously created and click Continue.
Follow the on-screen steps to create a CSR file for the VoIP Certificate.
Tip: A best practice in the Common Name field is to name the VoIP Certificate "MTP Mobile App VoIP Cert".
Download and save the Certificate file to your Mac, and click Continue.
Go to the saved certificate file in Finder, and drag it into the login section of Keychain Access.
From Keychain Access, click login in the left navigation, select the generated certificate, and click Export (File > Export).
Optionally, enter a password to protect the certificate and click OK.
Save the Appthority VoIP Certificate to your Mac.

To upload the VoIP Certificate and get deployment files

In MTP Manager, click Admin > Mobile App.
Select the appropriate Mobile Agent Deployment Type for your deployment method.
- When using an EMM, select it.
- For direct (Non-EMM) deployment, select Appthority.
Click the appropriate Upload button type for the certificates you created in the VoIP sections, and choose you Appthority Certificates.
Once uploaded successfully, MTP Manager shows Certificate uploaded with a green status banner at the top.

Re-sign the iOS MTP Mobile App

Prior to re-signing, make sure that you have the App Signer Script, Appthority IPA file, and iOS Mobile Provisioning Profile.

To re-sign the iOS MTP Mobile App

In Mobile Agent Deployment, click iOS Download to download the MTP Mobile App IPA file to your Mac.
Click the Download signer script link to download the script file to your Mac.
On your Mac, unzip the App Signer Script.
Open Terminal on your Mac, and navigate to the folder where the App Signer Script is saved.
- For EMM deployment, type:
  bash atresign.sh [path to the mobile agent binary] [path to mobile provisioning file]
- For direct (Non-EMM) deployment, type:
  bash atresign.sh [path to the mobile agent binary] [path to mobile provisioning file] [path to .plist]
  The re-signed version of the MTP Mobile App will be created on your Mac with “-resigned” appended to the file name (e.g. Appthority-Enterprise+1.0-resigned.ipa).

Troubleshoot Re-sign Error Messages

Error	Solution
The provisioning profile is not allowed to use the production environment for push notifications	Ensure that you created an iOS Distribution Provisioning Profile, not an iOS Development Provisioning Profile.
The required codesign identity is not in your keychain!	The Private Key necessary to re-sign the application is not in your Keychain Access. The Certificate that includes the matching Private Key previously selected.
Other errors	Contact your CSM and provide the specific error message and context.