# macOS notarytool: status: Invalid — The binary is not signed with a valid Developer ID certificate / does not have the hardened runtime enabled

**Code:** `Notarization: The binary is not signed with a valid Developer ID` · **Category:** macOS · **Seen on:** macOS

Apple's notary service rejected your app; the log lists exactly which binaries failed which checks.

## Meaning

Fetch the log: `xcrun notarytool log SUBMISSION_ID --keychain-profile PROFILE`. Typical failures: not signed with a Developer ID Application certificate, hardened runtime missing (`codesign --options runtime`), no secure timestamp (`--timestamp`), or unsigned nested binaries. Sign inside-out, then `xcrun stapler staple`.

## Common causes

- Signed with a Development/Apple Distribution certificate
- Hardened runtime not enabled
- Missing secure timestamp
- Unsigned nested frameworks/binaries
- SDK too old (requirement)

## Quick fix

1. `xcrun notarytool log ID --keychain-profile NAME`
2. Sign with `codesign --force --options runtime --timestamp --sign "Developer ID Application: …"`
3. Staple: `xcrun stapler staple MyApp.app`

## Detailed fix by platform

### macOS

1. `xcrun notarytool submit app.zip --keychain-profile NAME --wait`

## How to diagnose

1. **Log** — Which issue?
2. **Cert** — Developer ID Application?
3. **Runtime** — Hardened?

---
Source: [WhatIsMyError](https://whatismyerror.com/errors/macos/notarization-invalid-developer-id)