Docs › Apple signing credentials
Apple signing credentials
To build and sign iOS apps, BuildStack needs your Apple signing material. Like all credentials, it's sealed — encrypted at rest and only opened during a build.
What to provide
From the project's Apple credentials panel, add:
- A signing certificate (a distribution certificate as a
.p12, with its
password), and
- A provisioning profile that matches your app's bundle identifier and the
certificate.
These come from your Apple Developer account (Certificates, Identifiers & Profiles).
Tips
- The provisioning profile's bundle id must match the project/app.
- Use a distribution certificate + profile for release/TestFlight builds.
- When a certificate or profile expires, upload the new one — builds use whatever
is currently stored.
Security
The .p12 and profile are encrypted with a hardware-backed key and decrypted only in memory, only for the duration of a build. They're never shown back or written to logs.