locked
Code Signing App Package - Publisher ID

    Question

  • Desperately trying to figure this out. Must be missing something. We are trying to build a signed app package that will be deployed via sideloading keys

    the Publisher ID in the app package is as far as I know from the developer account and cannot be changed

    it looks like this

    CN=XXXXXXXX-XXXXXXXXXXX-XXXX-XXXXXXXXXX

    our code signing cert looks more like MSs sample like

    CN=Contoso Software, O=Contoso Corporation, C=US

    when I try to sign the app package I get an error

    error 0x8007000B: The app manifest publisher name (CN=XXXXXXX-XXX-XXXX-XXXX-XXXXXXXXXXX) must match the subject name of the signing certificate (CN=SomeCorp Inc., O=SomeCorp Inc., L=City, S=County, C=US).

    what is the proper way to sign this app package?

    thanks for any help

    Wednesday, March 04, 2015 7:34 PM

Answers

All replies

  • Hi Canesto,

    The app manifest publisher name must exactly match the subject name of the signing.

    Note  These names are specified in quotes and are both case and whitespace sensitive.

    You can update the Publisher attribute string that is defined for the Identity element in the AppxManifest.xml file to match the subject name of the intended signing certificate. Or, select a different signing certificate with a subject name that matches the app manifest publisher name. The manifest publisher name and the certificate subject name are both listed in the event message.

    Normally, you can solve sign app problems using the following link, you can find the above information on it too. https://msdn.microsoft.com/en-us/library/windows/desktop/jj835835(v=vs.85).aspx.

    Regards,


    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click HERE to participate the survey.

    Thursday, March 05, 2015 6:21 AM
    Moderator
  • Thanks for the reply.

    just to make sure I get this right.

    The publisher id is dictated by Microsoft and comes from the developer account and is a guid and cannot be changed, correct?

    The publisher id on our code signing certificate from godaddy is our company name, city, etc

    in order to make this work do we need to get a different certificate with the publisher id field from the ms developer account?

    thanks for your help.

    Mike

    Thursday, March 05, 2015 11:46 AM
  • Hi Canesto,

    >> The publisher id is dictated by Microsoft and comes from the developer account and is a guid and cannot be changed, correct?

    Based on my knowledge, this can be changed in visual studio. Right click on manifest file, chose view code and you will see an xml, edit the identity element, change the child element when necessary.

    >> in order to make this work do we need to get a different certificate with the publisher id field from the ms developer account?

    An easy way is to follow the MSDN page.

    How to create an app package signing certificate. https://msdn.microsoft.com/en-us/library/windows/desktop/jj835832(v=vs.85).aspx.

    How to sign an app package using SignTool. https://msdn.microsoft.com/en-us/library/windows/desktop/jj835835%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396.

    How to troubleshoot app package signature errors. https://msdn.microsoft.com/en-us/library/windows/desktop/jj835836(v=vs.85).aspx.

    Regards,


    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click HERE to participate the survey.

    Tuesday, March 10, 2015 7:39 AM
    Moderator