MacOS – My signed .pkg file is not accepted

certificategatekeeperinstallmacospkg

I'm struggling with signing my installer to keep Gatekeeper happy.

enter image description here

When building i sign the .pkg:

productsign --sign "3rd Party Mac Developer Installer: GNXXXXXXXXXX (XXXXXXXXXXX)" UnsignedJaXXXXXXXXXX0.5.pkg JaXXXXXXXXXXt0.5.pkg

using this certificate:

enter image description here

When checking with pkgutil I can see that the file is signed:

enter image description here

However still Gatekeeper is not happy.

spctl gives this result:

enter image description here

What am I missing?

Update

spctl with verbose:

enter image description here

Best Answer

You're using a signing identity that can only be used for Mac App Store distribution. You cannot sign with that identity and test it on your own Mac before submitting it to the Mac App Store - it won't pass GateKeeper validation.

If you want to create an installer for distribution outside the Mac App Store, you'll need to use a signing identity prefixed "Developer ID Installer".