# PurpleAir Utility installer/app for macOS is not signed properly

**URL:** <https://community.purpleair.com/t/purpleair-utility-installer-app-for-macos-is-not-signed-properly/7643>\
**Category:** Feature Requests\
**Created:** [January 1, 2024, 4:24am UTC](https://community.purpleair.com/t/purpleair-utility-installer-app-for-macos-is-not-signed-properly/7643 "2024-01-01T04:24:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Brice\_Ruth](https://sea2.discourse-cdn.com/flex020/user_avatar/community.purpleair.com/brice_ruth/32/2973_2.png) [@Brice\_Ruth](https://community.purpleair.com/u/Brice_Ruth)\
**Post date:** [January 1, 2024, 4:24am UTC](https://community.purpleair.com/t/purpleair-utility-installer-app-for-macos-is-not-signed-properly/7643/1 "2024-01-01T04:24:31Z")

</div>

While doing some troubleshooting recently, I noticed that the `.pkg` installer for macOS of the PurpleAir Utility app is not signed. It’s really not a great idea to have folks bypass the security precautions on their systems to use this app, asking them to blindly trust that the app hasn’t been tampered with is not a good idea. What I found was

- the installer isn’t signed at all
- the app itself does appear to be signed by a Developer ID, but
- the app hasn’t been taken through the macOS App Notarization process ([Notarizing macOS software before distribution | Apple Developer Documentation](https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution))

as a macOS app developer, I know that jumping through these hoops is a bit of a PITA, but once it’s done once, it’s a lot easier subsequent times and can even be automated.

Thanks so much for all the great work y’all do!

---

<div class="post-metadata">

**Author:** ![Josh\_PurpleAir](https://sea2.discourse-cdn.com/flex020/user_avatar/community.purpleair.com/josh_purpleair/32/2842_2.png) [@Josh\_PurpleAir](https://community.purpleair.com/u/Josh_PurpleAir)\
**Post date:** [January 5, 2024, 8:55pm UTC](https://community.purpleair.com/t/purpleair-utility-installer-app-for-macos-is-not-signed-properly/7643/2 "2024-01-05T20:55:14Z")

</div>

Thank for bringing this to our attention and linking the necessary steps! We’ll take a look at getting the Utility properly notarized.

---

<div class="post-metadata">

**Author:** ![Brice\_Ruth](https://sea2.discourse-cdn.com/flex020/user_avatar/community.purpleair.com/brice_ruth/32/2973_2.png) [@Brice\_Ruth](https://community.purpleair.com/u/Brice_Ruth)\
**Post date:** [January 6, 2024, 3:01am UTC](https://community.purpleair.com/t/purpleair-utility-installer-app-for-macos-is-not-signed-properly/7643/3 "2024-01-06T03:01:23Z")

</div>

It’s not super fun, but if you hit a wall, don’t hesitate to avail yourself of a tech support request (there should be a couple included in your Apple Developer subscription). I’ve definitely had to do so for exactly this area of stuff. Their security tools could be more developer friendly 😭
