Forum Discussion
Self-Signed Certificate in User Store Causes MSIX Installation Error
I created a self-signed certificate by following the official documentation provided https://learn.microsoft.com/en-us/windows/msix/package/create-certificate-package-signing
The documentation instructs users to add the self-signed certificate to the current user's certificate store like so:
New-SelfSignedCertificate -Type Custom -Subject "CN=Contoso Software, O=Contoso Corporation, C=US" -KeyUsage DigitalSignature -FriendlyName "Your friendly name goes here" -CertStoreLocation "Cert:\CurrentUser\My" -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.3", "2.5.29.19={text}")
However, when the certificate is added to the user-specific certificate store (Cert:\CurrentUser\My), attempting to install the signed msix file produces the following error:
This app package’s publisher certificate could not be verified. Contact your system administrator or the app developer to obtain a new app package with verified certificates. The root certificate and all immediate certificates of the signature in the app package must be verified (0x800B010A).
I had to resolve this by adding the certificate to the local machine certificate store (Cert:\LocalMachine\TrustedPeople) instead.
Does anyone have insights into why adding the certificate to the user-specific store causes the aforementioned issue, despite this being what's suggested in the documentation?