Correction, I got it working. Had a "moment of clarity" shortly after posting my last message.
Ran through these rough steps
- Install SafeNet Client - https://support.sectigo.com/Com_KnowledgeDetailPage?Id=kA01N000000zFLx
- Install Windows 10 SDK - https://developer.microsoft.com/en-US/windows/downloads/windows-10-sdk
- Select all options
- SafeNet will launch to system tray, plug in usb key and enter password
- Package application using criteria here
- Generate initial package without signing.
- MSIX app manifest publisher name must exactly match the entire subject section of the certificate.
- MSIX app manifest Publisher display must match the subject display name.
- Open cmd prompt to “C:\Program Files (x86)\Windows Kits\10\bin\10.0.17763.0\x64\”
- Build number must change based of packaging pc.
- Enter signtool sign /tr %vendorspecifictime% /td sha256 /fd sha256 /a %changetolocationoffiletobesigned%
- Errors can be diagnosed via Event Viewer (Local) > Applications and Services Logs > Microsoft > Windows > AppxPackagingOM > Microsoft-Windows-AppxPackaging/Operational
- SafeNet will popup, enter password for key. DO NOT BULK ATTEMPT THE PASSWORD!!!!!!!!!!!!
- To verify code sign, right click on file, properties and change to digital signatures. Look for file to be signed by your business.
- To manually install computer must be set to sideload, until published to microsoft store.