Most Mac developers know that the next OS X release is going to be out soon, and will introduce Gatekeeper, Apple's system to disallow running unsigned apps, at least by default. Pretty much like UAC on Windows.

I don't think this is a big deal since I assume a .component or .vst does not require it, but AFAIK installers or DMG do.

So, what's your opinion on this? I think it would be a good investment to pay for a Signed Developer ID, but a deal breaker is that I don't know if a signed PKG will keep asking for administrator password.

Thanks,
George

We're going to sign both plug-in and installer.

The process seems very straight forward and works right out of XCode 4.3 - you aquire your private keys, which takes a few minutes, and then you can sign apps.

However, we haven't upgraded our projects to XCode 4 yet, so we haven't actually done a test run.

My thought is though that this could have a positive effect for us since cracks can only be run by users in the unsafe mode. If that drags two or so sales towards us every year, the 99 bucks were well spent.

I presume you've read Chris Randall's take on this?

http://www.analogindustries.com/blog/entry.php?blogid=133670 5207848

My take; basically yet another set of zero-content/zero-gain changes developers will have to make things continue to work on the Mac.

And pretty disconcerting implications for the future, too, if they lock it down any further (ie Mac Store software only... ever).

So a unsigned .component or .vst plug-ins won't run on 10.8?

Not unless the user switches off GK.

I just did. I'm fine if Apple allows signed developers and mac app store products by default.

But I still won't see the point if I do a signed PKG installer, a signed plug-in and the user needs to enter admin password because files are required to be placed at system wide locations.

Does anyone know if you will have to use Xcode4.3/Lion or if it is possible to sign the installer/dmg on the command line in snow leopard?

My understanding is there'll be a warning that it's unsigned. Then everybody will just do like they've been doing on Windows for years and ignore it.

If this is wrong, somebody please let me know.

And aside from the $100 (which I resent) I'm afraid of XCode4 because I keep hearing it doesn't work with old projects and has left out the audio API and examples. And can you even compile a plug-in with XCode4 that will run on any OS previous to Lion, or is that part of how they force change?

It's just disgusting.

Looks like it's not that easy.

http://www.macrumors.com/2012/02/16/gatekeeper-already-prese nt-in-os-x-10-7-3-available-for-developer-testing/

As whyterabbyt already stated, looks like the system won't allow running a unsigned app unless you explicitly disable it on your system preferences.

Jesus f**king Christ!

And we get to pay $100 for the privilege of being f**ked over.

I thought we were able to enable GateKeeper with 10.7.4 under System Preferences > Security > General but I only get this:

Your macroumours link above said you need to enable it on the command line with:

sudo spctl --enable

Yes but I get:error: invalid API object reference

Hmmm. I'm afraid I can't try it myself as I'm still on 10.6 and it says 10.7.3 is required for this. And there's no way I'm going to upgrade this machine and break every project I have.

Why does anybody put up with this? And how much longer do they think people will?

My advice is installing 10.7 on a external USB drive. If you don't have one maybe you should get one... for 10.8 and GateKeeper like I will