Wait for readiness
Download the certificate ZIP after P12 and mobileprovision files are generated.
Import locally
Import both certificate files into a compatible local tool you trust.
Use only authorized apps
Use IPA files you own or are permitted to test. Do not process unauthorized third-party apps.