Mac+Rider环境下.NET 10 Maui应用上传苹果时出现无效配置文件错误

问题描述 #

在M1 Mac Mini上使用Rider编译.NET 10 MAUI应用，通过Transporter上传至App Store Connect时，收到「无效配置文件（Invalid Provisioning Profile）」错误，提示缺少代码签名证书（Missing code-signing certificate）。已确认以下事项：

• 苹果开发者账户中已配置分发代码签名证书
• 证书及对应私钥存在于钥匙串访问中
• 分发配置文件已下载到Mac，且可在Xcode中查看
• 应用Bundle ID设置为com.wallym.mcclurerealty

错误日志详情 #

httpBody: {
  "errors" : [ {
    "id" : "eb19429c-1b66-4cb9-bfb7-6202f889037e",
    "status" : "409",
    "code" : "STATE_ERROR.VALIDATION_ERROR",
    "title" : "Validation failed",
    "detail" : "Invalid Provisioning Profile. The provisioning profile included in the com.wallym.mcclurerealty bundle [Payload/McClureRealtyMaui.app] is invalid. [Missing code-signing certificate]. A distribution provisioning profile should be used when uploading apps to App Store Connect."
  } ]
}
=======================================
2026-02-02 15:55:37.389 DEBUG: [ContentDelivery.Uploader.B28278140] Uploading swinfo errors: Validation failed (409) Invalid Provisioning Profile. The provisioning profile included in the com.wallym.mcclurerealty bundle [Payload/McClureRealtyMaui.app] is invalid. [Missing code-signing certificate]. A distribution provisioning profile should be used when uploading apps to App Store Connect. (ID: eb19429c-1b66-4cb9-bfb7-6202f889037e)
   NSUnderlyingError : Validation failed (-19241) Invalid Provisioning Profile. The provisioning profile included in the com.wallym.mcclurerealty bundle [Payload/McClureRealtyMaui.app] is invalid. [Missing code-signing certificate]. A distribution provisioning profile should be used when uploading apps to App Store Connect.
      status : 409
      detail : Invalid Provisioning Profile. The provisioning profile included in the com.wallym.mcclurerealty bundle [Payload/McClureRealtyMaui.app] is invalid. [Missing code-signing certificate]. A distribution provisioning profile should be used when uploading apps to App Store Connect.
      id : eb19429c-1b66-4cb9-bfb7-6202f889037e
      code : STATE_ERROR.VALIDATION_ERROR
      title : Validation failed
   iris-code : STATE_ERROR.VALIDATION_ERROR
2026-02-02 15:55:37.390 DEBUG: [ContentDelivery.Uploader.B28278140] Saving uploader state (CDUploaderStateUploadAssetDescription) for identifier 'com.apple.cds_5959AB80-A11E-4399-AD3E-5891920C18B0'.
2026-02-02 15:55:37.393 DEBUG: [ContentDelivery.Uploader.B28278140] Wrote state to '~/Library/Group Containers/group.com.apple.contentdelivery/Library/Application Support/com.apple.TransporterApp/CDUploads/com.apple.cds_5959AB80-A11E-4399-AD3E-5891920C18B0.plist'.
2026-02-02 15:55:37.478 DEBUG: [ContentDelivery.Uploader.B28278140] Creating container for SPI analysis.
2026-02-02 15:55:37.478 DEBUG: [ContentDelivery.Uploader.B28278140] Getting upload instructions for SPI analysis.
2026-02-02 15:55:37.480 DEBUG: [ContentDelivery.Uploader.B28278140] 
=======================================

排查与解决步骤 #

• 确认配置文件与证书绑定关系
  双击本地的.mobileprovision配置文件，在弹出窗口中查看「证书」列表，确保其中的证书名称与钥匙串中带私钥的分发证书完全一致（钥匙串中证书前有小三角，展开可见私钥）。同时确认该配置文件是App Store分发类型，而非Ad Hoc或开发配置文件。

• 检查Rider的发布签名配置

  1. 右键MAUI项目 → 「属性」→ 「iOS」→ 「发布」
  2. 确认「签名身份」选择的是App Store分发证书，「配置文件」选择对应匹配的分发配置文件
  3. 若勾选「自动管理签名」，需确保Xcode已登录对应开发者账户，且能自动匹配正确的证书与配置文件；若手动配置，需取消自动管理，手动指定正确项
  4. 核对Bundle ID与配置文件中的ID完全一致，注意苹果Bundle ID区分大小写

• 清理缓存并重新生成签名文件

  1. 删除项目目录下的bin和obj文件夹，清理编译缓存
  2. 在钥匙串访问中删除重复或过期的分发证书，仅保留当前有效的带私钥证书
  3. 从苹果开发者中心重新下载最新的分发配置文件，替换本地旧文件
  4. 重启Rider和Transporter，重新编译发布

• 验证编译后应用的签名信息
  生成.ipa文件后，解压出Payload/McClureRealtyMaui.app，执行以下命令检查签名：

  codesign -dv --verbose=4 Payload/McClureRealtyMaui.app
  

  查看输出的「Authority」字段是否为你的App Store分发证书，同时用以下命令查看配置文件UUID，确认与签名输出中的一致：

  security cms -D -i 你的配置文件.mobileprovision | grep UUID
  

• 检查钥匙串权限
  打开钥匙串访问，找到分发证书，右键 → 「显示简介」→ 「访问控制」，勾选「允许所有应用程序访问此项目」，或手动添加Rider和Transporter到允许列表，避免权限不足导致无法读取证书私钥

内容的提问来源于stack exchange，提问作者Wallace B. McClure