Feedback on the new Azure code signing...

%3CLINGO-SUB%20id%3D%22lingo-sub-790850%22%20slang%3D%22en-US%22%3EFeedback%20on%20the%20new%20Azure%20code%20signing...%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-790850%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20asked%20for%20some%20feedback.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFirst%2C%20no%2C%20I%20didn't%20actually%20go%20through%20the%20process.%26nbsp%3B%20From%20reading%20the%20documentation%20it%20was%20quite%20clear%20to%20me%20that%20there%20is%20a%20limited%20use%20case.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20work%20to%20generate%20a%20code%20signing%20certificate%20for%20an%20organization%20might%20be%20something%20that%20people%20aren't%20use%20to%2C%20but%20that%20doesn't%20mean%20it%20is%20hard.%20And%20it%20is%20a%20one%20time%20event%20to%20generate%20the%20certificate%2C%20and%20then%20just%20one%20time%20to%20configure%20the%20packaging%20tooling%20to%20use%20it.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOn%20the%20other%20hand%2C%20unless%20they%20already%20plan%20to%20distribute%20apps%20via%20the%20Store%20for%20Business%2FEducation%2C%20the%20work%20to%20get%20a%20signed%20package%20for%20distribution%2C%20with%20the%20license%20file%20will%20be%20more%20work%2C%20as%20it%20is%20a%20multi-step%20process%20per-package.%26nbsp%3B%20Also%2C%20while%20I%20have%20used%20the%20Store%20for%20Business%2FEd%2C%20I%20can't%20get%20customers%20to%20use%20the%20Store%20for%20Business%2FEducation%20to%20get%20the%20packaging%20tool%20so%20they%20can%20pre-deploy%20into%20image%3B%2C%20so%20if%20they%20are%20not%20already%20using%20the%20store%20this%20is%20an%20absolute%20show%20stopper%20for%20them.%20(They%20don't%20know%20who%20to%20ask%20for%20permission%2Fcreds%20get%2Fsetup%20the%20store%2C%20and%20if%20they%20do%20know%20who%20they%20are%20afraid%20to%20ask).%20%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIt's%20always%20great%20to%20have%20more%20options%2C%20so%20this%20capability%20will%20be%20good%20for%20a%20few%20customers.%26nbsp%3B%20And%20maybe%20the%20process%20can%20improve%20over%20time%2C%20but%20from%20looking%20at%20the%20docs%2C%20I%20can't%20see%20wanting%20to%20use%20it.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETim%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-795873%22%20slang%3D%22en-US%22%3ERe%3A%20Feedback%20on%20the%20new%20Azure%20code%20signing...%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-795873%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F149589%22%20target%3D%22_blank%22%3E%40Tim%20Mangan%3C%2FA%3E%26nbsp%3BI%20recommend%20you%20go%20through%20the%20process%20to%20understand%20the%20end%20to%20end.%26nbsp%3B%20Its%20seems%20to%20work%20better%20for%20enterprises%20that%20have%20challenges%20distributing%20pfx%20files.%26nbsp%3B%20Its%20also%20good%20to%20note%20that%20the%20Store%20for%20Business%20is%20just%20a%20portal%20to%20enable%20the%20signing%2C%20they%20don't%20actually%20need%20to%20use%20the%20store%20for%20anything%20but%20to%20setup%20the%20service.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EJohn.%3C%2FP%3E%3C%2FLINGO-BODY%3E
MVP

You asked for some feedback.

 

First, no, I didn't actually go through the process.  From reading the documentation it was quite clear to me that there is a limited use case. 

 

The work to generate a code signing certificate for an organization might be something that people aren't use to, but that doesn't mean it is hard. And it is a one time event to generate the certificate, and then just one time to configure the packaging tooling to use it.

 

On the other hand, unless they already plan to distribute apps via the Store for Business/Education, the work to get a signed package for distribution, with the license file will be more work, as it is a multi-step process per-package.  Also, while I have used the Store for Business/Ed, I can't get customers to use the Store for Business/Education to get the packaging tool so they can pre-deploy into image;, so if they are not already using the store this is an absolute show stopper for them. (They don't know who to ask for permission/creds get/setup the store, and if they do know who they are afraid to ask).  

 

It's always great to have more options, so this capability will be good for a few customers.  And maybe the process can improve over time, but from looking at the docs, I can't see wanting to use it.

 

Tim

1 Reply

@Tim Mangan I recommend you go through the process to understand the end to end.  Its seems to work better for enterprises that have challenges distributing pfx files.  Its also good to note that the Store for Business is just a portal to enable the signing, they don't actually need to use the store for anything but to setup the service.

 

John.