Add App Signing Certificates

App signing certificates allow Approov to recognize app builds that were produced by your team. This is the usual way to let official app builds pass authenticity checks without registering each build individually.

Add an Android Signing Certificate

For Android apps, download the public signing certificate from the Google Play Console or extract it from your local keystore, then add it with auto-registration:

approov appsigncert -add app-signing-cert.der -autoReg

For local Android debug builds, you can add the debug keystore certificate. The exact command depends on the keystore format. See Android App Signing Certificates.

Add an Apple Signing Certificate

For iOS development builds, download the relevant public certificate from your Apple developer account or extract it from an archived app, then add it with:

approov appsigncert -add development.cer -autoReg

App signing certificate registration does not apply to apps distributed through the Apple App Store or TestFlight because Apple re-signs those apps before distribution. In those cases, use app registration instead.

See Adding Apple App Signing Certificates From Portal and Adding Apple App Signing Certificates From App.

Confirm Certificates

List configured signing certificates with:

approov appsigncert -list

The detailed management reference is Managing App Signing Certificates.

Why This Step Matters

Without a recognized signing identity or app registration, Approov cannot know that the app build is official. Metrics may show activity, but app authenticity checks will not pass in the way you expect.

Read Next

Next, integrate the backend so your API can verify Approov tokens.