Forum Discussion
signing certificate expiration and apps
Prashant_Patale I moved this item to a conversation as well so other can follow along.
We highly recommend time stamping the app when signing. If you use time stamping the apps will continue to deploy after the cert expires, without it you will need to resign you package.
More information here: https://docs.microsoft.com/en-us/windows/msix/package/signing-package-overview
John Vintzel (@jvintzel)
PM Lead, MSIX
Prashant_Patale I moved this item to a conversation as well so other can follow along.
We highly recommend time stamping the app when signing. If you use time stamping the apps will continue to deploy after the cert expires, without it you will need to resign you package.
More information here: https://docs.microsoft.com/en-us/windows/msix/package/signing-package-overview
John Vintzel (@jvintzel)
PM Lead, MSIX
jvintzel we have a customer that would like to outsource the packaging of apps with MSIX to a provider. They plan to offer a certificate - which will be used by the provide to sign packages - and they have asked what happens when they revoke that certificate , will installations initiated after the revocation date still work? Is this process influenced by TSA aswell?
- ShakersMSFT
Microsoft
Hi WesleeJKN0487,
If a certificate is revoked, previous installations and any future attempts will no longer be trusted. The timestamp does not matter if the certificate is revoked, only if the certificate expires.
Best,
Sharla
- Very valuable info, thank you Sharla.
jvintzel Thank you for the details John. This is really helpful.
