The ms-appinstaller protocol has been disabled.

I just found out that users can no longer install my MSIX from my website. This is a WPF application packaged with "Windows Application Packaging Project" (wapproj). When users click the "Get the app...

Aditi_Narvekar

Dec 15, 2021

bvenhaus Thank you for your question. We removed the ms-appinstaller custom scheme due to a security vulnerability. We do intend to bring this back, and are working on it. For now, you can update the link on your website by removing 'ms-appinstaller:?source='

<html>
    <body>
        <h1> MyApp Web Page </h1>
        <a href="http://mywebservice.azureedge.net/HubApp.msix"> Install app package </a>
        <a href="http://mywebservice.azureedge.net/HubAppBundle.msixbundle"> Install app bundle  </a>
        <a href="http://mywebservice.azureedge.net/HubAppSet.appinstaller"> Install related set </a>
    </body>
</html>

MikeH

Brass Contributor

Dec 28, 2021

Updates do work, yes. The .appinstaller file helpfully contains its own URL and that's what's used for update checking.

deonb1

Copper Contributor

Jan 03, 2022

Do you have a timeframe on when this will be addressed?

We have an .exe that is shipped on thousands of 3rd party drives that calls an ms-appinstaller link through the shell (no browser or web page involved). There isn't a way for us to just "update" the URL to not use ms-appinstaller.

Forum Discussion

The ms-appinstaller protocol has been disabled.

Resources