Screen captures from VBK are attached. Note that the error was submitted using the "issue collector" inside IGB. See "User Support" project for the originally submitted report. Attached images from VBK's computer are from email correspondence between [~aloraine] and VBK.

Noor Zahara - in addition to attaching the screen shots from your computer (as per email sent a few minutes ago), can you also please investigate:

• Do you observe the same warning/error when you attempt to install IGB from the "master branch" Mac installer - https://bitbucket.org/lorainelab/integrated-genome-browser/downloads/master.dmg

We have had similar issues in the past. Investigate by searching:

text ~ "damaged"

in Jira.

I am. getting the same warning when I tried to install https://bitbucket.org/lorainelab/integrated-genome-browser/downloads/master.dmg

Noor Zahara - please rename the files you attached so that we can easily tell that they are from your system. (Delete the attachment you added, then re-attach it using a different name.)

Noor Zahara - can you work on finding a solution to this problem today? This is a blocker – we need to fix it right away.

[~aloraine] - Sure. I can work on this.

Useful link - https://support.apple.com/en-us/HT202491

Please attach the file using a name that shows it was from yourself.

I ran keytool -list -v -storetype pkcs12 -keystore developerID_application_igb.p12 > output_file.out
The validity is Valid from: Thu Jan 15 15:49:00 EST 2015 until: Thu Jan 16 15:49:00 EST 2020
So mostly, the developer ID expiration date should be extended.

[~aloraine] - What should the expiration date be ?

Thanks. Please investigate how to extend the developer ID expiration date.

For a new key, the expiration data should be as far into the future as we can get.
Five years maybe, since that was the duration of the current key.

I am using macOS Mojave(10.14.6)

Sai Supreeth Segu: Can you explain why you are able to run the installer software without error? According to https://developer.apple.com/documentation/xcode/notarizing_macos_software_before_distribution

Beginning in macOS 10.14.5, software signed with a new Developer ID certificate and all new or updated kernel extensions must be notarized to run. Beginning in macOS 10.15, all software built after June 1, 2019, and distributed with Developer ID must be notarized. However, you aren’t required to notarize software that you distribute through the Mac App Store because the App Store submission process already includes equivalent security checks.

How were you able to run the 9.1.4 installer without observing the same error message observed by Noor Zahara and VBK (user who reported the issue.)?

Since your Mac is 10.15.6, you ought to have encountered the same problem.

My MacOS version is 10.14.6 maybe that's the reason I'm not facing this issue

Sai Supreeth Segu - Correcting my previous comment:

Since your Mac is 10.14.6, you ought to have encountered the same problem.

So how were you able to run the installer without observing the same error message?

Replying to question from Noor Zahara:

I do not yet understand what "notarizing" means or how we do it.

We need to do whatever is required to ensure that MacOS users can install the software.

If notarization is required, then we need to do it.

The users can still install the software. For now they just need to allow the app to be installed by going to System Preferences -> Security & privacy

It's a workaround, but we need to make the process super easy. So we will probably have to notarize it.

Noor Zahara - Does the error message tell the user what they need to do in order to run the software? I don't see it.

Replying to [~aloraine]

I believe I have selected the option "Allow to open the app" from Anywhere in my system long ago. That may be the only reason for installing IGB without any error.

[~aloraine] - I guess the message doesn't tell what to do. It happens for apps installed from the internet as well so it is a common scenario for people to face.
The other thing what users can do is instead of double clicking on the app, they can right click and open. This lets them install without any errors.

A video about notarization for reference - https://www.youtube.com/watch?v=IXnT-ibTLk8

Sai Supreeth Segu - please uncheck the option and confirm that the error occurs on your system.

I got this error but unable to replicate the error user is facing. I am trying to upgrade the OS version but I'm facing internet issues right now. I have tried installing IGB in another Mac system with OS version 10.15.6 then I have replicated the issue.

Sai Supreeth Segu and Noor Zahara: I need to advise the user one what to do.

Please confirm:

According to Noor Zahara's comment, once they have downloaded the file from BioViz.org, all they have to do is right-click (or control-click) the installer and select "open" to proceed with installation.

Noor Zahara - is this correct or am I misunderstanding you?

Users double click on the installer that they downloaded from BioViz.org and then once the dmg is mounted, they double click on the IGB image mounted and this is when they will see the warning message as attached. They need to select 'Show in Finder' and then again right-click on IGB image mounted to see the open option as attached.

If this sounds tedious, another option is to guide the user to click on ? icon on the warning window, that opens another window which explains how to open the app safely. It prompts the user to floow https://support.apple.com/en-us/HT202491

Noor Zahara - For the next step, can you look into whether or not we can notarize the IGB 9.1.4 installer "by hand".

The video you linked to looked like it would include this information. Could you investigate?

Put the notes on how to do that into this ticket (assuming it is possible).

Also, please be careful.

It is possible that if Apple scans our software, they may decide it is not safe because it contains a web server and is listening on various ports. We do not want our software to get black-listed because of that. So please also look into what types of things will trigger software getting labeled as malicious.

attn: Noor Zahara

I think the web server thing was what the speaker was talking about when he was talking about zoom.

The issue mentioned in this ticket is still present in the latest master.dmg
Tested with macOS 10.15.7

[~aloraine] - release-9.1.4 is the branch I should be using for IGB 9.1.4 right? I was trying to notarize the application by following some steps specified in https://www.excelsoftware.com/movie/macinstaller.mp4
https://www.youtube.com/watch?v=qoqDnrPYwzo

I am not totally sure of the details I will need to input to the clickInstall app. i have attached the screenshot of the details I have filled in. Kindly let me know what else need to be filled before sending the app for notarization. (For example - License agreement, background image, installer image, min MAC OS requirement, min RAM )

Before you try to notarize the installer, can you please make sure that the open ports in IGB will not cause a problem with the notarization process?

I am concerned that if you submit our application for the process, it will detect the open ports and flag our software as malicious or dangerous.

Can you please check into this aspect before proceeding?

https://www.youtube.com/watch?v=1kfwwaC_O80 and https://www.youtube.com/watch?v=f9hQmp1Cp8w talk about the application requirements for notarization.
They haven't spoken anything about the application being rejected because of open ports or any such thing. The only thing is that our application shouldn't contain any malicious content.

https://www.youtube.com/watch?v=220plbQ4oGk - The steps for notarization.

Mostly we can go ahead with the notarization.

As per https://developer.apple.com/documentation/xcode/notarizing_macos_software_before_distribution/resolving_common_notarization_issues we can resubmit an app if it gets rejected after fixing the discovered issues.