Code Signing -- errSecInternalComponent, unable to build self-signed root for signer "Developer ID Application..."

I am a developer on a project at work. I recently got a new laptop; however, since then I have been unable to build/deploy our application. I received a copy of the Developer ID Application certificate and Developer ID Installer certificate from a fellow developer. Note, everything works on their machine with these certificates.

I have gone through the steps documented here https://developer.apple.com/forums/thread/712005

When I run security find-identity -p codesigning, I have two certificates that show up. one for my User and one for the Developer ID Application that my colleague gave me. Both show up as matching and valid identities.

When I try to codesign "MyTrue", as documented in the link above, using "Apple Development" works; however, the "Developer ID Application" identity does not. I get a errSecInternalComponent error.

ahenderson@ahendersonmacbook [17:29:23] [~/Downloads]
-> % codesign -s "Apple Development" -f MyTrue -vvv
MyTrue: replacing existing signature
MyTrue: signed Mach-O universal (x86_64 arm64e) [MyTrue]

ahenderson@ahendersonmacbook [17:30:48] [~/Downloads]
-> % codesign -s "Developer ID Application" -f MyTrue -vvv
MyTrue: replacing existing signature
Warning: unable to build chain to self-signed root for signer "Developer ID Application: SRS Pharmacy Systems, Inc. ([REDACTED])"
MyTrue: errSecInternalComponent

I have downloaded all of the intermediate certificates from the apple PKI and have them installed under my keychain in login.

Having spent days on this, I am at the end of my rope.

Laptop Specs:

M3 Pro
36GB Ram
MacOS Sequoia 15.1

It is worth noting that my colleagues laptop is not running Sequoia. Not sure if that makes any difference or not.

It is also worth noting, that I can run the codesign manually with the Developer ID Application using sudo (I know I shouldn't do this, but I just wanted to see if that made any difference).

If, just for testing purposes, you create a new user account on your Mac [1], does the problem reproduce there?

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] So, in System Settings > Users & Groups.

I posted when I meant to add a comment. Please disregard this post.

AHHH that worked, but why? Do I need to migrate my development environment over to this second account? Or is there a way to fix what is broken on my current account?

So, replies are better than comments, as I explain in Quinn’s Top Ten DevForums Tips.

AHHH that worked, but why?

Excellent news.

Do I need to migrate my development environment over to this second account? Or is there a way to fix what is broken on my current account?

I wasn’t suggesting that you migrate to that new user. But I also don’t have a definitive answer as to what’s causing the problem. Still, it points to something that we need to rule out first, namely trust settings.

Log in as your main user and then run the following two commands from Terminal:

% security dump-trust-settings  
SecTrustSettingsCopyCertificates: No Trust Settings were found.
% security dump-trust-settings -d
SecTrustSettingsCopyCertificates: No Trust Settings were found.

What do you see?

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Code Signing -- errSecInternalComponent, unable to build self-signed root for signer "Developer ID Application..."
 
 
Q