Apple Distribution is the certificate that proves a build came from your team and is allowed to be distributed. It is the modern, unified replacement for the older, platform-specific iOS Distribution and Mac App Distribution certificates. One Apple Distribution certificate signs builds for iOS, iPadOS, macOS, tvOS, watchOS, and visionOS.
What it signs
- TestFlight builds (internal and external testers).
- App Store submissions for iOS, iPadOS, macOS, tvOS, watchOS, and visionOS.
- Ad Hoc builds for the specific devices listed in an Ad Hoc provisioning profile.
- Mac App Store submissions when paired with a Mac Installer Distribution certificate for the .pkg.
What it does not sign
- Builds installed outside the App Store on Mac (use a Developer ID Application certificate).
- Enterprise In-House builds (use an Apple Developer Enterprise Program certificate, which is technically a different distribution certificate type tied to the Enterprise Program).
- Daily debugging on the developer's own devices (use an Apple Development certificate).
When it expires
The certificate lasts one year, and its expiry does not touch your live App Store app: Apple re-signs store builds with its own keys, so users keep downloading and using the app. What breaks is new signing: release builds in CI, TestFlight uploads, and Ad Hoc installs once their profile lapses. The full per-type breakdown is in what happens when your Apple certificates expire.