[COMPASS-6636] Notarise MongoDB compass for mac OS 12.6.x Created: 21/Mar/23  Updated: 27/Oct/23  Resolved: 31/Mar/23

Status: Closed
Project: Compass
Component/s: None
Affects Version/s: 1.36.1
Fix Version/s: 1.36.1

Type: Task Priority: Major - P3
Reporter: Ghulam Murtaza Assignee: Unassigned
Resolution: Gone away Votes: 0
Labels: macos, notarized
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Attachments: PNG File MicrosoftTeams-image (4).png     PNG File post-install.png    
Documentation Changes: Not Needed

 Description   

Hi Team,

 

One of my customers reported that he is getting below warning on his MAC M2 running mac OS 12.6.x and latest version of Compass. Screenshot attached.

"MongoDB Compass.app" can't be opened because Apple cannot check it for malicious software.{}

I have checked and found that the notarisation was done earlier for MacOS 10.x as per this Jira ticket.  

I see currently the builds on my M1 does not seem to be notarised as well based on below output. 
spctl -a -t open --context context:primary-signature -v Downloads/mongodb-compass-1.36.1-darwin-arm64.dmg
Downloads/mongodb-compass-1.36.1-darwin-arm64.dmg: rejected
source=no usable signature
spctl -a -t exec -vvv Downloads/mongodb-compass-1.36.1-darwin-arm64.dmg
Downloads/mongodb-compass-1.36.1-darwin-arm64.dmg: rejected
 

It is important for my customer as the compliance requirement in his environment requires to run signed applications. Quoting customer here.

 

"For MacOS, the Compass installer is unsigned. This is a security concern for us as we require all applications to be signed and do not allow our developers/end-users to bypass this restriction."

and

"this is preventing us from being able to install Compass on new laptops so it's kinda a big deal. Please do escalate and let me know what you hear."

 

Help required:

  1. Please confirm if we have plan to notarise the compass package for Mac OS 12.x in the future as we did for MacOS 10.x in Compass version 1.23

Let me know if you have any questions or concerns.

 

Kind regards,

Ghulam



 Comments   
Comment by Ghulam Murtaza [ 31/Mar/23 ]

Issue has gone away

Generated at Wed Feb 07 22:43:51 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.