Forum Discussion
Vanbogie1200
Apr 06, 2021Copper Contributor
Can MSIX packages be signed via PS cmdlet 'Set-AuthenticodeSignature'
Our older code signing cert is about to expire so we're attempting to move the process to lean on our newer code signing process where the cert never leaves a particular server. This process at it's ...
Dian Hartono
Microsoft
Apr 06, 2021Hi Vanbogie1200, we recommend you use SignTool.exe to sign MSIX packages. You can find more information on this: Sign an app package using SignTool - MSIX | Microsoft Docs
Vanbogie1200
Apr 08, 2021Copper Contributor
Hi Dian, I was able to start signing the MSIX builds again using the signtool. So thanks for the suggestion.
On a side note, I suspect the issue with that cmdlet 'Set-AuthenticodeSignature' is that it's being run from PS 5.1. I noticed that PowerShell 5.1 also cannot view the signature on an MSIX while 7.0 has no issue. I plan on installing PS 7.0 on our signing server on Monday and will provide an update here in case there are anyone else is trying to sign this way.
On a side note, I suspect the issue with that cmdlet 'Set-AuthenticodeSignature' is that it's being run from PS 5.1. I noticed that PowerShell 5.1 also cannot view the signature on an MSIX while 7.0 has no issue. I plan on installing PS 7.0 on our signing server on Monday and will provide an update here in case there are anyone else is trying to sign this way.
- Feb 10, 2023
Vanbogie1200 Were you able to confirm that the PowerShell version is the root cause for this?