Forum Discussion

Amit Kumar's avatar
Amit Kumar
Brass Contributor
Nov 27, 2019

Signing MSIX using device guard

Hi John,

 

I was watching one of your slide where you spoke about using device guard signing . I am in middle of testing msix and wanted to check if your sign-packages-wdgss.ps1 file is placed at github for us to use .

 

I would also like to know by using this method we do not have to place any certificate on client as our MSIX is already signed by MS as we are in Azure tenant . Is my understanding correct ?

  • jvintzel's avatar
    jvintzel
    Icon for Microsoft rankMicrosoft
    Nov 27, 2019

    Amit Kumar There still needs to a root certificate installed to your client.  Each tenant has a unique root.  This way Fabrikam's apps are not trusted by Contoso.  You can enable the Device Guard Signer role and download the root certificate from the Microsoft Store for Business web portal.

     

    John (@jvintzel)

    PM Lead, MSIX 

Resources