MSIX blocks TPM

[James C Cooper]

Appears when you package an application that either writes to TPM or even more importantly READS from TPM MSIX is blocking access.

Any thoughts about adding support / pass through to access TPM ???

[#2]

Couple of Examples

1. If you were to package a browser with MSIX and your organization uses virtual smartcard, X.509 certificates, etc. that are stored in TPM for authenticating to Web Sites or SaaS applications ... the Browser which has been packaged as an MSIX cannot access the certificate stored in TPM ... making authentication with a certificate impossible.

2. If an organization asks a user to present strong credentials .. like a virtual smartcard, X.509 certificate, etc. that is stored in TPM to change their password ... the application fails when attempting to read the Certificate stored in TPM.

3. If you package an application which helps users to acquired a certificate that is stored in TPM  - Virtual Smartcard, X.509, etc. the application will FAIL when writing to TPM.

[#3]

Its great feedback and we will look to add it to the backlog.  You can also add it to the public ideas section and we can update the progress, as well as other folks can chime in.

John.