Appx code signing Guide

One 、APPX What is the file format ?

appx In fact, it is to install the file compression package , Package some common installation files , It includes DLL library 、CAT Digitally signed files 、 Multiple XML Documents, information documents, etc , Is an application package ready for distribution and installation .

appxs First time in Windows 8 Introduction in , To protect the safety of the system ,Windows 10 System use Windows UWP Platform authentication mechanism management .Appx Application running . All from Windows Downloaded from the app store .Appx Applications can run smoothly directly , For those who have not obtained the certification, the origin is unknown .Appx application , During installation, there will be “ Installation failed ” A hint of . Before uploading to Microsoft app store , You need to use a valid code signing certificate pair Appx The document is digitally signed .

Two 、 How to do appx digital signature ？

1、 Signature preparation

App package

To learn more about manually creating application packages , see also Use MakeAppx.exe Tools to create application packages .

Valid signing certificate

Apply for a valid code signing certificate , Please check the watcom code signature certificate .

Signature tool

Download and install SignTool Signature tool

2、 digital signature

give an example ：

View my certificate subject information as follows ：

Xml Of publisher It is written as follows ：

Signature ：

Cmd Get into makeappx.exe Catalog

First step ：makeappx.exe pack /v /h SHA256 /d C:\Users\***\Desktop\appx /p 123.appx（/d And then xml The catalog of ,/p And then appx The catalog of , What is not written will be makeappx.exe The catalog of ）

The second step ：signtool sign /v /a /sha1 Certificate fingerprint value /fd sha256 123.appx

3、 Summary of key points

First step /h sha256 Specified algorithm and step 2 /fd sha256 Should agree ; Be careful xml Writing , Otherwise, it will report a mistake .

Be careful ： If the company name contains , when ,Publisher It needs to use "; Quote the company name , give an example CN=WoTrus CACo., Ltd., It's in Publisher It's going to become CN=";WoTrus CACo., Ltd.";

Follow the above steps , Apply to the official website of wotong for effective Code signing certificate Yes Appx After the application package is signed , You can upload your app package to Microsoft app store .