Skip to content

[local build] iOS: "0 valid identities found" on macOS Tahoe 26 - Distribution certificate not recognized in temp keychain #3645

@JannisP007

Description

@JannisP007

Build/Submit details page URL

No response

Summary

EAS local builds on macOS Tahoe 26 (26.4.1 / 25E253) fail at PREPARE_CREDENTIALS
with "Distribution certificate hasn't been imported successfully". The certificate
is successfully imported (find-certificate confirms it), but security find-identity
returns 0 valid identities. This appears to be a macOS Tahoe compatibility issue
with the temporary keychain mechanism used by EAS local builds.

Managed or bare?

Managed

Environment

npx expo-env-info

Error output

[PREPARE_CREDENTIALS] [DIAG-1] find-identity -v ALLE: 0 valid identities found
[PREPARE_CREDENTIALS] [DIAG-2] find-identity -v -p codesigning: 0 valid identities found
[PREPARE_CREDENTIALS] [DIAG-3] find-certificate (filtered): SHA-1 hash: 3A50325D796B9014D4F4FF06B7D708A42BF20E11 "iPhone Distribution: Jannis Pohl (WRV9RQW49Z)"
[PREPARE_CREDENTIALS] [FIX-1] explicit security import OK
[PREPARE_CREDENTIALS] [FIX-2] set-key-partition-list OK
Error: Distribution certificate with fingerprint 3A50325D796B9014D4F4FF06B7D708A42BF20E11 hasn't been imported successfully

Reproducible demo or steps to reproduce from a blank project

  1. Install any Expo managed project on macOS Tahoe 26.4.1 (25E253)
  2. Run: eas build --platform ios --profile preview --local
  3. Build fails at PREPARE_CREDENTIALS phase

Root cause:

  • EAS creates a temporary keychain
  • Imports distribution certificate into it (FIX-1, FIX-2, FIX-3 all report OK)
  • find-certificate confirms certificate IS in the keychain
  • BUT security find-identity -v -p codesigning returns "0 valid identities found"
  • This appears to be a macOS Tahoe 26 security policy change affecting
    temporary keychains

Workarounds tried (none worked):

  • Generating a new distribution certificate via eas credentials
  • Downloading credentials.json locally
  • Manually importing p12 into login keychain

Note: Cloud builds (without --local) work fine. Issue is specific to
--local flag on macOS Tahoe 26.

Metadata

Metadata

Assignees

No one assigned

    Labels

    needs reviewIssue is ready to be reviewed by a maintainer

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions