What Is Notarization?

Notarization is the process, most associated with Apple's macOS, of uploading already-signed software to the platform vendor, which runs an automated malware scan and issues a ticket attesting the software passed. The ticket can be stapled to the artifact so the OS recognizes it as notarized offline. It is a step beyond signing that the OS requires before running distributed apps without friction.

Why it matters

On modern macOS, unnotarized apps are blocked or buried behind scary warnings even if validly signed. Notarization is therefore a required release step for Mac distribution, and because it runs as a CI step against a vendor service, build pipelines must handle its signing keys and waiting for the vendor response.

Related concepts

• Distinct from, and following, code signing
• The ticket can be stapled for offline verification
• A required macOS distribution step

Related guides