How to create Certificate for iOS
There are two recommended options depending on your OS and workflow:
Certificate Setup
Fresh Certificate (New Setup)
Case 1: Fresh Certificate (New Setup)
1. Generate CSR (Certificate Signing Request)
Step 1: Generate CSR
- macOS:
- Open Keychain Access → Certificate Assistant → Request a Certificate From a Certificate Authority…
- Enter:
- User Email Address (Apple ID email)
- Common Name (e.g., “QuikApp Distribution”)
- Select Saved to disk → Save as CertificateSigningRequest.certSigningRequest
- Windows alternative (OpenSSL):
Copy to clipboard
openssl req -new -newkey rsa:2048 -nodes -keyout ios_private_key.key -out CertificateSigningRequest.certSigningRequestStep 2: Create Certificate in Apple Developer Portal
- Log in → Certificates, Identifiers & Profiles → Certificates
- Click + Add → Apple Distribution
- Upload CSR file → Download generated .cer
Step 3: Import Certificate into Keychain Access (macOS)
- Double-click .cer → installs under My Certificates, private key auto-paired.
Step 4: Export as .p12
- In Keychain Access → My Certificates → locate Apple Distribution certificate
- Right-click → Export → Format: .p12
- Set a password → Save as ios_distribution.p12
Step 5: Upload to QuikApp
- Upload .p12 + password in Certificates section
Already Present Certificate (Existing Setup)
Case 2: Existing Certificate (macOS)
Open Keychain Access → My Certificates → locate certificate + private key
Export as .p12 → set password → Save as ios_distribution_existing.p12
Upload to QuikApp + password
Notes:
P12 Flow bundles certificate + private key → easier for automation & CI/CD
Keep backups of .p12 in secure vaults
Reusable across multiple machines
Fresh Certificate (New Setup)
Case 1: Fresh Certificate (New Setup)
- codeWindows Steps:
Generate CSR:
Copy to clipboard
openssl req -new -newkey rsa:2048 -nodes -keyout ios_private_key.key -out CertificateSigningRequest.certSigningRequest- Go to Apple Developer Portal, Create certificate in → download ios_distribution.cer
- Generate private key (if not already created):
Copy to clipboard
openssl genrsa -out ios_private_key.key 2048Upload ios_distribution.cer + ios_private_key.key to QuikApp
macOS Steps:
- Generate CSR via Keychain or OpenSSL
- Create certificate → download .cer
- Generate private key with OpenSSL (if needed)
- Upload .cer + .key to QuikApp
Already Present Certificate (Existing Setup)
Case 2: Existing Certificate
Windows Steps:
- Download existing certificate .cer from Apple Developer Portal
- Locate existing private key .key or generate a new one (requires new certificate if lost)
- Upload .cer + .key to QuikApp
macOS Steps:
- Download existing .cer from Apple Developer Portal
- Check Keychain Access for matching private key
- Export as .p12 (Option A) or extract .key with OpenSSL
- Upload .cer + .key to QuikApp if using Manual Flow
Notes on Private Key (.key)
- Only for Manual Flow (Option B)
- Losing the .key makes the certificate unusable
- Store securely in password manager or encrypted vault
