Notarize with Enterprise API Key

Hello!

I've been facing an issue with notarizing a macOS app with an Enterprise API Key.

Due to some misunderstanding setting up the project some years ago, the notarization step was using a developer's accounts API Key. I am looking to fix it to have everything centralized in the Enterprise account we work with, but I get "Debug [JWT] Generating new JWT for key ID" with the new key. This is using the xcrun notarytool directly to get more input.

Using Fastlane it fails as: Error polling for notarization info: [11:29:25]: unexpected token at ''

The project is deployed via MDM, so we need it to prevent the security warning.

I used this documentation to create the key: https://developer.apple.com/documentation/enterpriseprogramapi/creating-api-keys-for-enterprise-program-api

I have tried a Developer and an Admin access key, and the Account Holder has also created an Admin key but the errors keep the same.

I just updated my Fastlane script to use the new key with the updated values. The old developer account key still works.

I am not sure if I am missing any steps in the documentation or if this is not achievable.

Important to add that all the profiles and certificates were already set up properly in the Enterprise account, the only error was using an App Store Connect Key instead of an Enterprise Key.

Thanks in advance for the help.

I followed this other documentation: https://developer.apple.com/documentation/enterpriseprogramapi/generating-tokens-for-api-requests and generated a JWT token manually.

With it, I could curl -v -H 'Authorization: Bearer ' "https://api.enterprise.developer.apple.com/v1/certificates" with success, but for https://appstoreconnect.apple.com/notary/v2/submissions? it fails with 401.

Failed for both keys, Developer and Admin access.

I also tried changing "aud": from apple-developer-enterprise-v1 to appstoreconnect-v1, just for the sake of trying.

Notarize with Enterprise API Key
 
 
Q