How to sign MSIX AppPackage in Visual Studio 2022

Björn Lundmark 1 Reputation point
2024-09-13T12:35:19.39+00:00

When creating a Winui 3 AppPackage using the Create App Package wizard in Visual Studio 2022, it asks for a Key Vault URI.

I have a Trusted Signing resource in Entera, but I can't find any information about getting a Key Vault URI to this resource in the Azure Control Panel.

Do we need to create an Azure Key Vault as well? How do we then add our Trusted Signing certificate to the vault?

NB The Trusted Signing certificate is working from GitHub Actions.

// Björn

Azure Trusted Signing
Azure Trusted Signing
Trusted Signing is a Microsoft fully managed, end-to-end signing solution that simplifies the certificate signing process and helps partner developers more easily build and distribute applications.
91 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Rob Caplan - MSFT 5,452 Reputation points Microsoft Employee
    2024-09-27T01:10:22.3133333+00:00

    Meha is correct: VS' Create App Package wizard doesn't connect directly to Trusted Signing, but it can create an unsigned package which you can sign later with signtool and Trusted Signing. You'll need to make sure that the package's publisher matches what you use for Trusted Signing.

    Create App Packages wizard

    Set up SignTool to use Trusted Signing

    1 person found this answer helpful.
    0 comments No comments

  2. Meha-MSFT 250 Reputation points Microsoft Employee
    2024-09-25T02:26:03.84+00:00

    @Givary-MSFT are you familiar with how can we tag someone who is familiar with the Create App Package wizard here if there's an alternate to use a certificate that's outside of Key Vault URI?

    @Bjorn - Trusted Signing certificates are stored in mHSMs and not in keyvault.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.