Mac "Open Anyway" not working for Unsigned Mac VST3

General JUCE discussion
1

My unsigned Mac VST3 cannot be opened using The security settings option “Open Anyway”. What could be the problem? Did I miss some setting in Xcode when building the plugin. I was using Xcode 14.2. The plugin was built with the standard architecture Intel/Arm.

2

Would you like to validate the plugin with pluginval? Does the macOS ask for security settings? Does pluginval show any error message?

3

Yes, Pluginval passes all tests successfully. My beta tester gets the message that the plugin cannot be opened because the developer can’t be verified. I have not signed it with Apple, but as I understand, if you go to Privacy & Security you can click the button “Open Anyway”. In this case “Open Anyway” doesn’t work. There is no request for security settings. Also, I was using pluginval on a PC. Is there also a version to test on a Mac? - OK I found out Pluginval is also for Mac. I have tested also on Mac and the plugin passes all tests with the latest version of Pluginval downloaded today.

4

‘Open anyway’ is only for applications. The simplest way is to have your tester disable gatekeeper while testing, or add a specific exception for your plug-in. They would need to use the terminal command spctl.

5

Thanks Adam,

Interesting. So “Open Anyway” doesn’t work on VST3 plugins. I guess I will have to sign the plugin with Apple in the end. Does anyone know if Apple Developer membership must be renewed every year to keep the plugin allowed on a Mac?

6

AFAIK macOS does not allow the ‘‘Open Anyway’’ now. However, you could make a pkg installer (which you should do when you finally release the plugin). When the beta tester open the pkg installer, he could allow the installer in the security setting. Then your VST3 will be ready.

Once you sign and notarize the plugin/installer, it is forever for that plugin/installer.

7

Thanks for good info! :slight_smile:

8

Any pointer to where I can learn how to make the pkg installer?

9

Bascially you need to create a distribution.xml and then package all binaries to create the pkg.

The installer script from surge is where I start. If you build the installer locally, then it should be enough:

And here is my python script (it works on the Github CI, so you may also need to read the CI code):

10

Thanks.

11

Plugins must be signed. “Open Anyway” doesn’t work for dynamic executables/Libraries anymore.

You only need a valid Apple Developer license to sign your plugins, but they will continue to work even if you stop paying for a license.

12

Thanks oli1!

Good reply!

/Hans

13

From Terminal you can do the following to stop macOS from complaining about it:

xattr -d -r com.apple.quarantine /Library/Audio/Plug-Ins/VST3/YourPlugin.vst3
1 Like
14

Will the VST3 plugin be available for use if I do this?

15

Yes, it should. Running that command strips off the com.apple.quarantine attribute that tells macOS the file is from an untrusted source. Basically it tells macOS to stop protecting you from this file. :wink:

16

@kerfuffle got there before me. For those who like GUIs over terminal, here’s a nice option too: