No Upgrade Scenario when Certificate Expires


Let's say you create a package (, sign it, and deploy it.  6 months later you create an update (, keep the package name the same and use the same cert to sign it.


Then prior to the next release of your software your certificate expires, so you go out and purchase a new one, keeping the same "Subject/Publisher". And now you want to release a new version of your package.  You can keep the package name the same, up the version string, and create version


On a system with version 1 installed, if you install version 2 it  updates version 1. If you then install version 2, it does not work as an upgrade; the app is installed side by side. 


This is not a desired outcome, and should be addressed.

1 Reply



Lineage will continue if the publisher name is the same.  I suspect that in your scenario the publisher field in the manifest might be different, causing an issue and change to identity.  I think your feedback is there a way to keep continuity with my app in these situations?  If so that is great feedback and recommend that it be added to the ideas section.


John Vintzel (@jvintzel)
Program Manager Lead, MSIX