# Certificate 安装指南

## 证书创建成功

**证书详情：**
- Certificate Name: Lo Warren
- Certificate Type: Mac Development
- Expiration Date: 2027/05/18
- Created By: Lo Warren (warren@accusys.com.tw)
- Team ID: K3TDMD9Y6B

---

## 步骤1：下载证书

**Portal操作：**
- 点击 **Download** 按钮
- 证书保存到 `~/Downloads/`

**常见文件名：**
- `development.cer`
- `LoWarren.cer`
- 自动生成的名称

---

## 步骤2：导入证书到Keychain

**运行脚本：**
```bash
./scripts/install_certificate.sh
```

**或手动执行：**
```bash
# 找到证书文件
CERT_FILE=$(find ~/Downloads -name "*.cer" -mtime -1 | head -1)

# 导入到Keychain
security import "${CERT_FILE}" \
  -k ~/Library/Keychains/login.keychain-db \
  -T /usr/bin/codesign \
  -T /Applications/Xcode.app/Contents/Developer/usr/bin/codesign
```

---

## 步骤3：验证导入成功

**检查证书：**
```bash
security find-identity -v -p codesigning
```

**预期输出：**
```
1) ABC123DEF456789 "Apple Development: Lo Warren (K3TDMD9Y6B)"
   1 valid identities found
```

**如果显示0 valid identities：**
- 证书导入失败
- 检查Keychain权限
- 尝试手动导入

---

## 步骤4：配置代码签名

**创建entitlements.plist：**
```xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.developer.system-extension</key>
    <true/>
    <key>com.apple.developer.system-extension.install</key>
    <true/>
    <key>com.apple.security.files.user-selected.read-write</key>
    <true/>
</dict>
</plist>
```

**保存为：** `entitlements.plist`

---

## 步骤5：签名应用

**方式1：使用现有binary（推荐）**
```bash
codesign --sign "Apple Development: Lo Warren (K3TDMD9Y6B)" \
  --entitlements entitlements.plist \
  --identifier com.momentry.markbase.fskit \
  --options runtime \
  target/release/fskit_mount
```

**方式2：创建Xcode项目**
```bash
xcodebuild -project MarkBaseFSKit.xcodeproj \
  -scheme MarkBaseFSKit \
  -configuration Release \
  CODE_SIGN_IDENTITY="Apple Development" \
  DEVELOPMENT_TEAM="K3TDMD9Y6B" \
  PRODUCT_BUNDLE_IDENTIFIER="com.momentry.markbase.fskit"
```

---

## 步骤6：安装System Extension

**系统命令：**
```bash
systemextensionsctl install \
  --team K3TDMD9Y6B \
  --bundleID com.momentry.markbase.fskit \
  --type filesystem \
  target/release/fskit_mount.app
```

**注意：**
- 需要将binary打包为.app bundle
- 或创建完整的Xcode项目

---

## 步骤7：用户批准

**macOS弹出提示：**
1. System Settings → Privacy & Security
2. 点击 **Allow** 按钮
3. 重启Mac

**验证安装：**
```bash
systemextensionsctl list
# 输出：1 extension(s)
```

---

## 完整流程时间

|步骤 |时间 |
|------|------|
| Certificate创建 | 2分钟 ✅ |
| 证书下载 | 30秒 ⏳ |
| 导入Keychain | 1分钟 ⏳ |
| 配置entitlements | 2分钟 ⏳ |
| 签名应用 | 3分钟 ⏳ |
| 安装Extension | 1分钟 ⏳ |
| 用户批准 | 1分钟 ⏳ |
| **总计** | **10分钟** |

---

## 下一步操作

**立即需要：**
1. 点击 **Download** 按钮
2. 告诉我证书文件名
3. 运行 `./scripts/install_certificate.sh`

**完成后：**
- 验证证书导入成功
- 准备签名应用
- 安装System Extension

---

**最后更新：** 2026-05-18 18:10