The Apple Worldwide Developer Relations Intermediate Certificate is required for all apps in the Mac App Store, including OS X installers. When used to sign an app, the certificate enables OS X to confirm that the app has not been corrupted or modified by an attacker. This certificate expired on 14 February 2016, causing error dialogs and preventing some apps from launching. Most affected apps have already been updated with the new certificate. But if youdownloaded an OS X installer in case of trouble, you may be in for a surprise the next time you try to use it.
If you are in the middle of an OS X install and get tripped up by the expired certificate, Randy Singer offers a suggestion on how you can work around the problem quickly, without having to download a new installer:
Gatekeeper is not part of the equation in this instance. Install packages could be signed with certificates long before the introduction of Gatekeeper, and Apple was signing the OS installer at least as far back at 10.7 (may be earlier, maybe much earlier).
Thank god for Tidbits !!However the article raises more questions than it answers for me.And now the questions:Are the current downloads as of this date, 3/2/2016, that are available from the App Store > Purchased, the newest versions with valid certificates?If not, how will we know when the latest and greatest are ready for download?
Hope someone that really knows can answer these questions. Not just guesses.I need to re-download Mountain Lion through El Capitan. About an hour for each so do not wish to jump the gun and have to do it all over.
Glad to see a news site covering this. I stumbled across this issue last week and managed to piece pretty much the same things together. Recorded on -the-os-x-installer-cant-be-verified/ including the OpenSSL command to check the expiry dates on any installers you might already have saved.
Yeah, I'm kicking myself slightly, since I was aware of the certificate problem in mid-February, but got distracted by other things before getting around to writing about the apps. And although a few people raised the installer issue at that point, I didn't notice until Randy posted on TidBITS Talk.
If all your previously downloaded installers show DOWNLOADED in your Purchases list, is there some simple way to clear that so that you can re-download these newer installers? I have tried clearing cookies and resetting the App from the Developer menu, and also purging all store caches from ~/Library/Caches but no dice...
The reason for the Terminal command is that once you're in the installer, you can't get to the Date & Time preference pane to change the date, but you can get to Terminal. That's meant as a "oh, drat!" workaround that prevents an hour-long download just as you were starting to install. The proper solution is to get a new version of the installer.
Probably (assuming automatic time setting is turned off), but if you're in a position where you can set up your installation environment in advance, you should just get a new installer so it's not an issue.
Yes, I understand the best practice is to re-download the new installers.Give your readers a heads up and save them some time.If you have previously downloaded and saved the installer on a different partition or external hard drive, unmount them before downloading. If you don't, the download does not appear in Applications because somehow it knows you have it stored elsewhere. Just lost 2 hours as a result of this. 1st one failed, unmounted the partitions and externals, 2nd attempt successful.Thanks
Yes, just to follow up on what Marv noted, my links in the App Store Purchased list finally went from DOWNLOADED to DOWNLOAD when I ejected an external drive that also had copies of the installers on it.
My 2009 Mac Pro, running OS X 10.10.5 now, in App Store, I only see, under Purchased, the El Capitan, Yosemite and Mavericks installers to re-download. If I wanted to avoid the Date trick in Terminal and get updated Lion and Mountain Lion installers, I don't see how. The Purchased list only goes back to Jan 7, 2011.
So wouldn't you think Apple would put a different version number on the installers with the upgraded certificate so people would know? I just re-downloaded the 4 available OS Installers from the App Store for my flash installers. Interestingly, two of the new ones had the same version number as the installer on my flash drives but the new Yosemite was version 1.6._43_... and I had 1.6._7_ from 2014 on my flash installer! The 'new' installer had an older version number! Yeesh, Apple, if this is certificate issue is a real problem.
Installed 10.11.3 just yesterday from an installer downloaded shortly after the installer became available - sometimes odd stuff like wrong language appears (and was not able to install when abroad before changing the clock manually in terminal) when installing, but no problems with certificates - maybe not applicable to the 10.11.3 installer then ... .
Thanks for the heads up. You saved us all hours of grief.Spent last nite downloading.-Ran into 1 inexplicable error where Lion would fail error 1004 (on a machine that came with Snow Leopard (go figure). Thankfully was able to via my laptop, but how many folks have 3 Macs. Will now copy all to a (to a reformatted) USB stick - hope that works as many count on me for system upgrades.
Thank you Adam Engst for this latest Tidbits that told me what is wrong with the installer. I was able to change the date in terminal (once I figured out I needed to add sudo to the date string), and install 10.10.5. So far my CS4 is working. I'll give it a few days and then upgrade my husband's computer.
I read this article when it came out but procrastinated doing anything about it because I didn't need to use any of my archived installers at the time. Then, a few days ago I did. Instead of looking this up, I wasted a lot of time talking to Apple tech support, which apparently knows nothing about the problem. According to them, older versions of OS X are no longer available from the App Store. It didn't occur to me at the time to disconnect the drive partitions that had OS X installers on them. Such a simple solution.
Internet Recovery Mode downloads the latest compatible version of macOS or OS X over the Internet and installs it to your hard drive. The entire process may take several hours depending on the quality of your Internet connection.
Once you have space on your computer, figure out what version of OS X you would like to install. On older versions, you can find the previous versions of OS X installed on your Mac by opening the App Store > Applications and viewing your Purchase page. Click the Install button next to the macOS you want to download.
If you used Disk Drill for creating your bootable drive, a window will prompt your actions for using the install disk you made. But if you created your own using Terminal, use OS X Utilities Selector and find Reinstall OS X. Find and select your install disk with your bootable version of your preferred macOS, and click continue through to the license agreement. Once you agree, you should be prompted by the installer. Once the installation is completed, your computer should restart. If it does not restart itself, make sure you restart it normally. The downgrade should be complete!
You will need at least an 8GB USB flash drive as the El Capitan beta is a 6GB download. You will need to download the OS X 10.11 install through the Mac App Store by redeeming your code from the beta program. Once the download completes, do not continue with the install. Instead, follow these steps to create your USB bootable drive. 2b1af7f3a8