“Integrity could not be verified”
Work through the causes of iOS integrity and verification failures in the right order.
This message does not identify one cause. It means iOS could not complete the verification chain for that installed package.
Check in this order
1. Confirm the files belong together
Use the P12 and provisioning profile delivered as one pair. Do not mix a Development P12 with a Distribution profile or combine files from separate orders.
2. Check the profile
Confirm that it:
- has not expired;
- includes the current device UDID when required;
- authorises the certificate used to sign;
- covers the app's effective bundle identifier;
- permits the entitlements retained in the signed app.
3. Check certificate status
If all newly signed apps fail, check whether the signing certificate has been revoked or otherwise invalidated. Use your provider's authenticated status process or inspect it locally; do not upload the private P12 to arbitrary checker sites. The certificate checker asks Apple's status service and reads the P12 in the browser without uploading it.
4. Try a known-good IPA
Sign a simple IPA from its official project using the same configuration. If it installs, the original IPA is likely malformed, incompletely signed or requesting incompatible capabilities.
5. Remove optional complexity
Retry without injected tweaks, duplicated extensions, custom entitlements or aggressive metadata changes. App extensions and frameworks must also be signed correctly.
6. Check trust and connectivity
Some signing paths require the device to verify the developer certificate online. Apple documents PPQ checks for newer development teams and says restrictive networks must allow https://ppq.apple.com. See Apple's provisioning update note.
Do not broadly block Apple domains as a first-line fix. Blocking verification can itself prevent launch.
What not to do
- Do not keep reinstalling the exact same broken output.
- Do not delete an existing data-bearing app before testing separately.
- Do not assume changing DNS repairs an invalid signature.
- Do not buy another certificate until you have distinguished an IPA-specific failure from a certificate-wide one.