ok sadly I have failed. The installer 'succeeds' but the app won't pass Gatekeeper. With more strict signing options I get 'code failed to satisfy specified code requirement(s)' which probably means it includes code that requires some Gatekeeper entitlements - and doesn't have them specified. I don't know how to do this . @User and @User if you have any ideas about how to get netclient to run on a Mac without doing anything dodgy please let me know. speaking of dodgy, I'll see tomorrow if I can bypass the notarisation requirement by distributing via an MDM