An App Store provisioning profile is the profile type you use to sign builds destined for TestFlight or the App Store. Unlike Development and Ad Hoc profiles, it has no UDID list. It trusts that whoever installs the app got it from Apple's distribution channels, and that Apple's review process has already vetted the build.
What's in it
- One explicit App ID (no wildcards in current toolchains).
- The Apple Distribution certificate that will sign the build.
- All entitlements your app uses, including push notifications, App Groups, and any capability that requires Apple's approval.
- An expiration date, usually one year after creation.
When you need to regenerate
- The Apple Distribution certificate it references was rotated or revoked.
- You added or removed an entitlement (push, iCloud container, App Group).
- The profile expired or is about to. Apple will reject TestFlight uploads with expired profiles.
- You renamed the App ID or changed the team that owns it.