{"id":41781,"date":"2024-01-16T16:52:09","date_gmt":"2024-01-16T21:52:09","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=41781"},"modified":"2024-01-16T16:52:38","modified_gmt":"2024-01-16T21:52:38","slug":"resolving-trusted-execution-problems","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2024\/01\/16\/resolving-trusted-execution-problems\/","title":{"rendered":"Resolving Trusted Execution Problems"},"content":{"rendered":"<p><a href=\"https:\/\/developer.apple.com\/forums\/thread\/706442\">Quinn<\/a>:<\/p>\n<blockquote cite=\"https:\/\/developer.apple.com\/forums\/thread\/706442\"><p>If you&rsquo;re developing software for macOS your goal is to avoid trusted execution entanglements. You want users to install and use your product without taking any special steps. If, for example, you ship an app that&rsquo;s blocked by Gatekeeper, you&rsquo;re likely to lose a lot of customers, and your users&rsquo; hard-won trust.<\/p><p>[&#8230;]<\/p><p>If you launch a quarantined app, the system invokes Gatekeeper.  Gatekeeper checks the app for problems.  If it finds no problems, it asks the user to confirm the launch, just to be sure.   If it finds a problem, it displays an alert to the user and prevents them from launching it.  The exact wording of this alert varies depending on the specific problem, and from release to release of macOS, but it generally looks like the ones shown in <a href=\"https:\/\/support.apple.com\/en-us\/HT202491\">Apple &gt; Support &gt; Safely open apps on your Mac<\/a>.<\/p><p>[&#8230;]<\/p><p>If your product is an app and it works correctly when not quarantined but is blocked by Gatekeeper when it is, you have a Gatekeeper problem.  For advice on how to investigate such issues, see <a href=\"https:\/\/developer.apple.com\/forums\/thread\/706379\">Resolving Gatekeeper Problems<\/a>.<\/p><\/blockquote>\n<p>Alas, I&rsquo;m still seeing problems where some customers can&rsquo;t launch my apps because Gatekeeper erroneously reports them as damaged. The only workaround seems to be to instruct the customer to manually remove the quarantine flag or to download the app in a way that doesn&rsquo;t quarantine it.<\/p>\n<blockquote cite=\"https:\/\/developer.apple.com\/forums\/thread\/706442\"><p>If none of the above resolves your issue, look in the system log for clues as to what&rsquo;s gone wrong.  Some good keywords to search for include[&#8230;]<\/p><\/blockquote>\n<p>See also: <a href=\"https:\/\/developer.apple.com\/forums\/thread\/130560\">Testing a Notarised Product<\/a>.<\/p>\n<p>Previously:<\/p>\n<ul>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2020\/12\/14\/damaged-apps-that-cant-be-opened\/\">&ldquo;Damaged&rdquo; Apps That Can&rsquo;t Be Opened<\/a><\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>Quinn: If you&rsquo;re developing software for macOS your goal is to avoid trusted execution entanglements. You want users to install and use your product without taking any special steps. If, for example, you ship an app that&rsquo;s blocked by Gatekeeper, you&rsquo;re likely to lose a lot of customers, and your users&rsquo; hard-won trust.[&#8230;]If you launch [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2024-01-16T21:52:12Z","apple_news_api_id":"c138fab3-95b5-4309-a751-a6709bf15d52","apple_news_api_modified_at":"2024-01-16T21:52:12Z","apple_news_api_revision":"AAAAAAAAAAD\/\/\/\/\/\/\/\/\/\/w==","apple_news_api_share_url":"https:\/\/apple.news\/AwTj6s5W1QwmnUaZwm_FdUg","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[465,30,2385,71,48],"class_list":["post-41781","post","type-post","status-publish","format-standard","hentry","category-technology","tag-gatekeeper","tag-mac","tag-macos-14-sonoma","tag-programming","tag-security"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/41781","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=41781"}],"version-history":[{"count":1,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/41781\/revisions"}],"predecessor-version":[{"id":41782,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/41781\/revisions\/41782"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=41781"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=41781"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=41781"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}