diff --git a/codesign.xml b/codesign.xml
index 1952adc61f5..a4b5a163fb5 100644
--- a/codesign.xml
+++ b/codesign.xml
@@ -40,8 +40,12 @@
     <property name="codesign.options" value="--force --options runtime"/>
     <property name="codesign.arg"
               value="--entitlements ${setup}/app/default.entitlements --requirements ${codesign.requirement}"/>
+    <property name="codesign.provisionprofile" value="embedded.provisionprofile"/>
 
     <target name="codesign" depends="dotclean,compile-codesign-requirement">
+        <copy todir="${bundle}/${bundle.contents}" overwrite="true">
+            <file file="${setup}/app/${codesign.provisionprofile}"/>
+        </copy>
         <echo
             message="Code signing ${bundle} with certificate ${codesign.certificate} and entitlements ${codesign.arg} from ${codesign.keychain}"/>
         <apply executable="/usr/bin/xcrun" failonerror="true"
diff --git a/setup/app/embedded.provisionprofile b/setup/app/embedded.provisionprofile
new file mode 100644
index 00000000000..394124c7788
Binary files /dev/null and b/setup/app/embedded.provisionprofile differ