Fastlane enterprise iOS certificate expiring

Question

I have used Fastlane to manage our enterprise certificates and profiles. Now the enterprise certificates are expiring next month.

My questions are:

1. If I nuke the enterprise certificates & profiles using "fastlane match nuke enterprise" and recreate new profiles and certificates then do my currently deployed apps (to more than 5000 users) stop working on their iPad?

2. How can I create another distribution certificate using Fastlane and renew all the profiles using the new certificate and keeping the old certificate as it is so that my already deployed apps do not get affected?

question from:https://stackoverflow.com/questions/65903960/fastlane-enterprise-ios-certificate-expiring

Answer 1

Finally, this is what I did and it worked in Production.

Apple Developer Account Type: Enterprise.

1. Delete the Enterprise certificate files from the git repository where Fastlane pushes the certificates and profiles.

2. Run "fastlane match enterprise".

This will create a new Enterprise certificate. Note Apple only allows 2 production certificates per account. So at this point, your account should show your old and the newly created Distribution (Enterprise) certificate.

3. Now run "fastlane match enterprise --force"

This will re-create the profiles using the new certificate and push it to the Git repository. Pass the bundle identifiers of all the profiles which you wish to renew.

You could skip Step 2 technically and just execute Step 3 but I didn't do that and I didn't want to redo this again.

So this will keep your current deployed apps active. You can create new builds or re-sign the old builds, with the new certificate and profiles and push out the new builds.

Once you are sure that all the users have the updated builds you can delete the old certificate from the Apple Developer account or let it expire on its own and then delete it, once expired.

Above process will renew the certificate for 3 years and profile for 1 year.