Updated on April 19, 2023:#
Because initially, passengers in different locations did not require two-factor authentication during sign-up, but after logging into their accounts, they encountered cases of two-factor authentication. This made me have to take it seriously.
Because I found that the IP that triggered the two-factor authentication during login was not the IP of the signing server from the beginning, I tried to modify the passed IP to my IP in China at the reverse proxy layer. At that time, it showed the effect I expected: direct login and two-step verification with a domestic address.
I thought there was no problem, but later I found that no matter how I adjusted the configuration of the reverse proxy part, the location that triggered the two-factor authentication was the same as my node 😣
I captured the packets one by one, and then looked at the source code of the server. It seems that the server only serves as a device registration 😭
So I temporarily gave up the SideStore solution and switched to the mature P12 solution.
The following is the original text:
This is a guide for using the Apple Developer Account that I share with you to rent a house together. Follow this article to bring your device on board.
Enable Developer Mode#
If your phone's system version is updated to iOS 16.0, you need to enable the Developer Mode in the system.
The path to enable it is Settings App Privacy & Security Developer Mode
Obtain the UDID of the device#
First, visit Get UDID, or you can use a mobile device to scan the QR code:
When you open the page, you will be asked to install the Profile. Allow it and install the profile in the settings:
Wait a moment, the browser will automatically open and display your UDID:
Please send it to me in the following format:
UDID
Device Model
Your Name
Obtain the UDID for as many devices as you need to configure. After adding, it cannot be modified, only added. After obtaining the UDID, you can remove the profile, as it will not be used again.
Install SideStore#
After you submit the UDID, I will repackage SideStore for you. After notifying you that it can be downloaded, you can click the link to download it, or scan the QR code to download it:
After waiting for a while, you will see the downloaded SideStore on your desktop. Don't open it yet.
Configure the pairing file#
For the SideStore installed through the pre-signed app, you need to manually complete the device pairing, which will be used to simulate a computer. The specific details are not mentioned here.
This step requires a computer.
Choose your platform:
The downloads provided here are mirrors and are not updated in real time. After downloading, unzip it, then connect your device to the computer, trust the computer, and run the extracted binary file.
After successful operation, a .mobiledevicepairing file will be generated in your running directory. Send it to the Files App through methods such as AirDrop or File Transfer Assistant.
Open SideStore, and you will receive a prompt:
Select OK, and then select the .mobiledevicepairing file that you just saved. This completes the installation of SideStore.
Configure the signing server#
Open the settings, turn off Use preferred servers, and fill in the content I provided in Aniserre URL.
By fixing the signing server, everyone can use the same device for signing, reducing the risk control of device login, and no need for two-factor authentication.
After configuring, go back to SideStore, select login in the app's settings, and enter the account and password I provided to you:
Wait a moment, and the account will be logged in.
Install Wireguard#
Search for Wireguard in the App Store to install it (it seems that it is not available in the Chinese App Store, and signing distribution will be provided later if there is a demand).
After opening it, click the plus sign in the upper right corner to scan the QR code:
Import the configuration file to start the installation. You can name it SideStore.
If you want to install an app, open the tunnel without affecting normal network connections:
Install Apps#
In SideStore, there are built-in software sources. If your network conditions are acceptable, you can directly install software from them. There are plans to build a self-owned source in the future.
If your main purpose is to sign apps, then bring up the share interface of the app (such as in the Files app) and choose to open it with SideStore.
If you can't find it, go to More and then open SideStore.
You can also open SideStore, click the plus sign in the upper left corner of My Apps to select IPA installation.
Note: Since the signing process requires uploading the IPA, and the server speed is not that fast, you may need to wait for a while when uploading larger apps.
If the progress bar is completed and a new Sideloaded app appears, congratulations, you're done!
After this, when you need to install a new app, you only need to:
- Prepare the IPA
- Open Wireguard and start the connection
- Open SideStore, import the IPA, and wait for the installation to complete
- Turn off Wireguard and enjoy! 😎
Frequently Asked Questions#
Q: Do I need a computer to install software like AltStore?#
No, only the first time you install SideStore, you need to use a computer to generate a pairing file. After that, you can use it completely without a computer. However, when installing software, you need to connect to Wi-Fi (hotspots seem to work).
Q: What are the advantages of your method compared to buying certificates online?#
For online sellers of P12 certificates, one is that the threshold for self-signing may be slightly higher, and there may be certain restrictions on the number of signed apps, and there is a possibility of being revoked by the developer personally. With SideStore, you can install the desired software on up to 10 devices (not sure if there is a limit to the number of App IDs for one account, theoretically, you can install many).
Q: Will sharing the account lead to the account being disabled?#
By using the same SideStore server, all signing and login operations can be performed on the same "fake MAC" device, which will not cause a large number of device logins or the use of Apple ID IP addresses everywhere.