Unable to sign msix package: error: This file format cannot be signed because it is not recognized.

Question

I am trying to sign msix package using self signed certificate, I have created self signed certificate using powershell when I sign the msix file from my local using signtool command (SignTool sign /fd sha256 /a /f D:	est.pfx /p password D:	est.msix) the msix file got signed successfully, but in devops when I use the same certificate getting below error :

SignTool Error: This file format cannot be signed because it is not recognized.

SignTool Error: An error occurred while attempting to sign: C:\__w\1\a\OneLake.msix
&nbsp;
Below are the tasks used in yaml file:

-&nbsp;task:&nbsp;AzureKeyVault@2
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;displayName:&nbsp;'Azure&nbsp;Key&nbsp;Vault:&nbsp;MSBIESTier1Testing'
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;inputs:
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;azureSubscription:&nbsp;'*****'
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;KeyVaultName:&nbsp;****
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;SecretsFilter: cert

-&nbsp;task:&nbsp;MSIX.msix-ci-automation-task.msix-packaging.MsixPackaging@1
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;displayName:&nbsp;'MSIX&nbsp;build&nbsp;and&nbsp;package'
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;inputs:
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;outputPath:&nbsp;'$(Build.ArtifactStagingDirectory)	est.msix'
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;solution:&nbsp;'$(Build.SourcesDirectory)\*.sln'
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;clean:&nbsp;true
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;buildPlatform:&nbsp;x64
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;configuration:&nbsp;'Debug'
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;msbuildArchitecture:&nbsp;x64
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;msbuildLocationMethod:&nbsp;location
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;msbuildLocation:&nbsp;'C:\Program&nbsp;Files\Microsoft&nbsp;Visual&nbsp;Studio\2022\Enterprise\MSBuild\Current\Bin\MSBuild.exe'
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;msbuildArguments:&nbsp;'/v:n&nbsp;/nr:false&nbsp;/flp1:Verbosity=d;LogFile=$(OUTPUTROOT)\logs\msbuild_x64_release.log;Encoding=UTF-8&nbsp;/flp2:logfile=$(OUTPUTROOT)\logs\msbuild_x64_release.err;errorsonly&nbsp;/bl:$(OUTPUTROOT)\logs\msbuild_x64_release.binlog'
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;maximumCpuCount:&nbsp;false
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;logProjectEvents:&nbsp;true

&nbsp;&nbsp;-&nbsp;task:&nbsp;MSIX.msix-ci-automation-task.msix-signing.MsixSigning@1
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; displayName:&nbsp;'Sign&nbsp;MSIX&nbsp;package'
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inputs:
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; certificateType:&nbsp;base64
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; encodedCertificate:&nbsp;'$(cert)'

Can you please help us here ?
&nbsp;
Regards,
Kalyani.

kalyaniparne · Answer

Aniket_Banerjee&nbsp;: in my local I could see it is&nbsp;10.0.22000.0(C:\Program Files (x86)\Windows Kits\10\bin\10.0.22000.0\x86\signtool.exe), I am not sure how to check in ADO but in the logs I could see this "C:\__w\_tasks\MsixSigning_501a9528-7fa4-4cb5-b8da-79ded62b74eb\1.1.1\lib\signtool.exe"

aniket_banerjee · Answer

Hi KalyaniParne,
&nbsp;
This seems more like a signtool issue. Can you telll us the version(s) of signtool you are using in your local machine and ADO?

rspopovi · Answer

Any updates on this issue? I'm encountering the same thing.

Forum Discussion

Unable to sign msix package: error: This file format cannot be signed because it is not recognized.

Share

Resources