你需要:

1)私钥和公钥。

你的钥匙链上有这个符号

2)由这些密钥的签名请求生成的证书

3)连接到该证书的配置文件

假设你换了电脑，想重新设置Xcode配置文件。你是怎么做到的?

Open Xcode, press ctrl + O to open the Organizer, and delete all provisioning profiles you might have installed already. Open keychain access, and create a signing request which you save to file (when you create the request, a private and public key is created in your keychain). Create/Update a certificate in the provisioning portal by sending apple this signing request Download and install the newly created certificate. Revoke your provisioning profiles and update them with the new certificate. Download and install the newly updated provisioning profiles.

我发现我需要拖动distribution_identity。我从开发人员程序门户网站上的“Certificates -> Distribution”页面下载的cer文件到密钥链访问程序中，然后这个错误就消失了。

昨天我们的CI服务器也遇到了类似的问题。无法对应用程序扩展名进行错误签名

Code Sign error: No matching provisioning profiles found: No provisioning profiles with a valid signing identity (i.e. certificate and private key pair) matching the bundle identifier XXX were found.

注意:我自己从开发者门户网站创建了配置文件(不是由Xcode管理的)。

错误在于，我已经使用分发证书创建了供应配置文件，但是构建设置设置为使用开发人员证书。将其更改为使用分发证书解决了这个问题。

摘要:在生成设置中也要匹配用于创建配置文件的证书。

这里的每个人都错了。你所需要做的就是按照苹果在“管理你的数字身份”中提供的步骤操作。

它指导你通过Xcode导出你的证书，并通过Xcode重新导入。它工作得很好，但要确保你的用户名在两台电脑上是相同的，否则就会失败。

对于开发证书，您只需创建一个新的证书并将其与配置文件匹配即可。但是对于分发，就像你要提交给苹果时，你不能这样做，必须使用团队代理创建的分发证书。问题是您需要计算机上的私钥。这很简单，但是，创建证书的团队代理复制私钥给你，下面是来自Apple的说明，我希望这对你有帮助。

It is critical that you save your private key somewhere safe in the event that you need to develop on multiple computers or decide to reinstall your system OS. Without your private key, you will be unable to sign binaries in Xcode and test your application on any Apple device. When a CSR is generated, the Keychain Access application creates a private key on your login keychain. This private key is tied to your user account and cannot be reproduced if lost due to an OS reinstall. If you plan to do development and testing on multiple systems, you will need to import your private key onto all of the systems you’ll be doing work on.

To export your private key and certificate for safe-keeping and for enabling development on multiple systems, open up the Keychain Access Application and select the ‘Keys’ category. Control-Click on the private key associated with your iPhone Development Certificate and click ‘Export Items’ in the menu. The private key is identified by the iPhone Developer: public certificate that is paired with it. Save your key in the Personal Information Exchange (.p12) file format. You will be prompted to create a password which is used when you attempt to import this key on another computer. You can now transfer this .p12 file between systems. Double-click on the .p12 to install it on a system. You will be prompted for the password you entered in Step 4.

我通过

A)进入门户上的配置文件页面

b)在你遇到麻烦的配置文件上点击Edit(右边)。

c)选中相应的证书框(默认不勾选)，选择正确的App ID(我的旧的已经过期了)

d)下载并使用新的配置文件。删除旧的。

显然，这个问题有4个不同的原因:

您的钥匙串缺少与您的 iPhone Developer或iPhone 发行证书。 您的钥匙链缺少苹果全球开发者关系 中级证书。 您的证书已被撤销或已过期。 在线证书状态协议(OCSP)或证书 撤销列表(CRL)被打开 钥匙串访问首选项

.