Hey everyone,
This is a known change in macOS Sierra and I’m working to get a proper fix into Fastlane as well as into our own codebase.
I was at Apple two weeks ago and the engineers told me that this is an intentional change. They want to prevent any other executable from accessing those certificates without prior being explicitly granted access to it.
You can work around it right now by adding this to your Fastfile (after you call Match to import your certs): security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k circle circle.keychain
Please note that you have to be sure that match is importing the certificates into the circle.keychain and not into the login.keychain.
Please checkout this post that published yesterday. By using this you don’t have to change your Fastfile at all. Fastlane Match will pickup the environment variables automatically.