Signing MSIX using device guard

[Amit Kumar]

Hi John,

I was watching one of your slide where you spoke about using device guard signing . I am in middle of testing msix and wanted to check if your sign-packages-wdgss.ps1 file is placed at github for us to use .

I would also like to know by using this method we do not have to place any certificate on client as our MSIX is already signed by MS as we are in Azure tenant . Is my understanding correct ?

[#2]

@Amit Kumar There still needs to a root certificate installed to your client.  Each tenant has a unique root.  This way Fabrikam's apps are not trusted by Contoso.  You can enable the Device Guard Signer role and download the root certificate from the Microsoft Store for Business web portal.

John (@jvintzel)

PM Lead, MSIX