Do I have to notarize my .dmg AND my .app when distributing?

I think I’m almost there, I installed notarytool.

When I submit my .dmg for notarization, do I have to wrap it in a .zip file, or submit the .dmg as it is (because .dmg is an archive file)?

When I submit my .app for notarization, I have to wrap it in a .zip:
ditto -c -k --keepParent "dist/My Application.app" dist/MyApplication.zip

xcrun notarytool submit dist/MyApplication.zip --keychain-profile "mykeychain_profile_just_created" --wait

Do those two command lines look ok?

You can submit the .dmg file directly.

Thanks… its my understanding that if I submit the .dmg it will automatically notarize the app inside the .dmg too.
Am I correct in thinking that?

Correct.

Yay, finally made it - thank you so much for your input, its been very helpful.
I’m a Windows guy so this has been a rabbit hole for me, but made it in the end.
I don’t suppose there is a way to get rid of this message is there? I think I’m stuck with it, not a big deal just wondering.
image

Yeah, I don’t think you can get rid of that. The fact that it says “Apple checked it…” indicates that the system does recognize the app as being notarized.

1 Like

Is the ability to Notarize and Sign included in the $99 Apple Developer account fee ?

Yes, it’s included with the annual membership.