Set up bundle IDs, capabilities, signing certificates, provisioning profiles, and encrypted signing sync with the asc cli. Use when onboarding a new app, rotating signing assets, or sharing them across a team.
The asc-signing-setup skill helps developers create, manage, renew, and share Apple platform signing assets required for iOS and macOS application development and distribution. It provides a structured workflow for setting up bundle identifiers, enabling app capabilities, generating signing certificates, creating provisioning profiles, and installing or inspecting profiles locally. The skill is designed to simplify the often complex process of configuring Apple code signing infrastructure while ensuring that applications are properly prepared for development, testing, and App Store distribution.
Key capabilities include bundle ID creation and management, configuration of platform capabilities such as iCloud settings, certificate creation using existing or generated certificate signing requests (CSRs), and provisioning profile creation for different distribution scenarios. The skill also supports downloading, inspecting, installing, auditing, revoking, and cleaning signing assets. In addition, it includes encrypted team-based asset synchronization through `asc signing sync`, allowing certificates and provisioning profiles to be securely stored and shared through a git repository using password-based encryption.
This skill is intended for iOS and macOS developers, release engineers, DevOps engineers, and development teams responsible for application signing and distribution. Common use cases include onboarding a new application, rotating expiring certificates, generating new provisioning profiles, auditing outdated signing assets, cleaning local development environments, and maintaining a shared signing infrastructure across a team. It is particularly useful for teams seeking a lightweight alternative to more complex certificate-sharing workflows while retaining secure, encrypted storage of signing assets.
Authentication must be configured using `asc auth login` or ASC environment variables. You should also know the target bundle identifier and platform, and have a CSR available or use the built-in CSR generation option.
Yes. The workflow includes creating signing certificates, generating CSRs when needed, creating provisioning profiles, downloading profiles, and installing or inspecting them locally.
Yes. The `asc signing sync` workflow allows encrypted certificates and provisioning profiles to be pushed to and pulled from a git repository for team use.
No. The documentation notes that the Apple `profileState` value may not accurately indicate expiration. Expiration audits should compare the profile expiration date against the current date.
The pull operation decrypts and writes files to a local directory. Importing certificates into a keychain or installing provisioning profiles must be performed separately.
Quick Setup:
.claude/skills/