diff --git a/.gitignore b/.gitignore
index bc2a950..dc24bce 100644
--- a/.gitignore
+++ b/.gitignore
@@ -17,6 +17,7 @@ npm-*
 /build
 /dist
 /.opt-in
+/embedded.provisionprofile
 
 # don't store the assets downloaded with the `fetch` script
 /static/assets/
diff --git a/electron-builder.yaml b/electron-builder.yaml
index f62aa34..153bf8f 100644
--- a/electron-builder.yaml
+++ b/electron-builder.yaml
@@ -5,18 +5,20 @@ appId: edu.mit.scratch.scratch-desktop
 productName: "Scratch Desktop"
 mac:
   category: public.app-category.education
-  entitlements: packaging/entitlements.plist
-  icon: packaging/ScratchDesktop.icns
+  entitlements: buildResources/entitlements.plist
+  icon: buildResources/ScratchDesktop.icns
   target:
     - dmg
     - mas
 mas:
   type: distribution
   category: public.app-category.education
-  entitlements: packaging/entitlements.plist
-  icon: packaging/ScratchDesktop.icns
+  entitlements: buildResources/entitlements.plist
+  icon: buildResources/ScratchDesktop.icns
+  files:
+    - embedded.provisionprofile
 win:
-  icon: packaging/ScratchDesktop.ico
+  icon: buildResources/ScratchDesktop.ico
   target:
     - appx
     - nsis