asc-signing-setup

---
name: asc-signing-setup
description: Set up bundle IDs, capabilities, signing certificates, and provisioning profiles with the asc CLI. Use when onboarding a new iOS or macOS app, rotating expired certificates, creating provisioning profiles, configuring app capabilities (iCloud, push, etc.), or troubleshooting code signing failures. Triggers: "bundle ID", "signing certificate", "provisioning profile", "code signing", "asc certificates", "asc profiles", "capabilities", "signing assets", "rotate cert".
allowed-tools: Bash, Read
metadata:
  triggers: bundle ID, signing certificate, provisioning profile, code signing, asc certificates, asc profiles, capabilities, signing assets, rotate cert, onboard app, iOS signing
  related-skills: asc-cli-usage, asc-id-resolver, asc-xcode-build, asc-release-flow
  domain: mobile-deployment
  role: specialist
  scope: deployment
  output-format: commands
last-reviewed: "2026-03-15"
---

# asc signing setup

## Iron Law

**NEVER CREATE A NEW CERTIFICATE OR PROFILE WITHOUT CHECKING IF ONE ALREADY EXISTS — RUN LIST COMMANDS FIRST**

Use this skill when you need to create or renew signing assets for iOS/macOS apps.

## Preconditions
- Auth is configured (`asc auth login` or `ASC_*` env vars).
- You know the bundle identifier and target platform.
- You have a CSR file for certificate creation.

## Workflow
1. Create or find the bundle ID:
   - `asc bundle-ids list --paginate`
   - `asc bundle-ids create --identifier "com.example.app" --name "Example" --platform IOS`
2. Configure bundle ID capabilities:
   - `asc bundle-ids capabilities list --bundle "BUNDLE_ID"`
   - `asc bundle-ids capabilities add --bundle "BUNDLE_ID" --capability ICLOUD`
   - Add capability settings when required:
     - `--settings '[{"key":"ICLOUD_VERSION","options":[{"key":"XCODE_13","enabled":true}]}]'`
3. Create a signing certificate:
   - `asc certificates list --certificate-type IOS_DISTRIBUTION`
   - `asc certificates create --certificate-type IOS_DISTRIBUTION --csr "./cert.csr"`
4. Create a provisioning profile:
   - `asc profiles create --name "AppStore Profile" --profile-type IOS_APP_STORE --bundle "BUNDLE_ID" --certificate "CERT_ID"`
   - Include devices for development/ad-hoc:
     - `asc profiles create --name "Dev Profile" --profile-type IOS_APP_DEVELOPMENT --bundle "BUNDLE_ID" --certificate "CERT_ID" --device "DEVICE_ID"`
5. Download the profile:
   - `asc profiles download --id "PROFILE_ID" --output "./profiles/AppStore.mobileprovision"`

## Rotation and cleanup
- Revoke old certificates:
  - `asc certificates revoke --id "CERT_ID" --confirm`
- Delete old profiles:
  - `asc profiles delete --id "PROFILE_ID" --confirm`

## Notes
- Always check `--help` for the exact enum values (certificate types, profile types).
- Use `--paginate` for large accounts.
- `--certificate` accepts comma-separated IDs when multiple certificates are required.
- Device management uses `asc devices` commands (UDID required).

## Documentation Sources

| Source | How to Access | Purpose |
|--------|--------------|---------|
| asc CLI help | `asc bundle-ids --help`, `asc certificates --help`, `asc profiles --help` | Current flags for each signing entity |
| XcodeBuildMCP | `show_build_settings` tool | Inspect current signing config in Xcode project |

More agent context in kumaran-is/claude-code-onboarding

157 other files this repository gives its agents, the first 60 shown.