Upload rejected: invalid signature or profile

iOS / Xcode · last reviewed 2026-11-10

The error looks like this

ITMS-90035: Invalid Signature. Code object is not signed at all.

Why it happens

The build was signed with a Development/Ad Hoc profile or a certificate that is not "Apple Distribution".

How to fix it

Archive with the App Store provisioning profile and Apple Distribution certificate.
Export with method app-store-connect.
Every extension needs its own App Store profile too.

Not sure this is your error? Let ReleaseMedic read the whole log

Build logs are long and the last line is rarely the real cause. ReleaseMedic finds the first real error, explains it and gives the steps — free, and the log never leaves your computer.

$ npx releasemedic log build.log

Or pipe a build straight in: cd android && ./gradlew bundleRelease 2>&1 | npx releasemedic log -

Catch it before you build

Most release errors come from project settings you can check in seconds — signing, SDK levels, privacy manifests, permissions, push and login setup.

$ npx releasemedic