Appx code signing Guide

One 、APPX What is the file format ?

appx In fact, it is to install the file compression package , Package some common installation files , It includes DLL library 、CAT Digitally signed files 、 Multiple XML Documents, information documents, etc , Is an application package ready for distribution and installation .

appxs First time in Windows 8 Introduction in , To protect the safety of the system ,Windows 10 System use Windows UWP Platform authentication mechanism management .Appx Application running . All from Windows Downloaded from the app store .Appx Applications can run smoothly directly , For those who have not obtained the certification, the origin is unknown .Appx application , During installation, there will be “ Installation failed ” A hint of . Before uploading to Microsoft app store , You need to use a valid code signing certificate pair Appx The document is digitally signed .

Two 、 How to do appx digital signature ？

1、 Signature preparation

App package

To learn more about manually creating application packages , Please see use MakeAppx.exe Tools to create application packages [1].

Valid signing certificate

Apply for a valid code signing certificate , Please check the watcom code signature certificate [2].

Signature tool

Download and install SignTool Signature tool

2、 digital signature

give an example ：

View my certificate subject information as follows ：

Xml Of publisher It is written as follows ：

Signature ：

Cmd Get into makeappx.exe Catalog

First step ：makeappx.exe pack /v /h SHA256 /d C:\Users\***\Desktop\appx /p 123.appx（/d And then xml The catalog of ,/p And then appx The catalog of , What is not written will be makeappx.exe The catalog of ）

The second step ：signtool sign /v /a /sha1 Certificate fingerprint value /fd sha256 123.appx

3、 Summary of key points

First step /h sha256 Specified algorithm and step 2 /fd sha256 Should agree ; Be careful xml Writing , Otherwise, it will report a mistake .

Be careful ： If the company name contains , when ,Publisher It needs to use "; Quote the company name , give an example CN=WoTrus CACo., Ltd., It's in Publisher It's going to become CN=";WoTrus CACo., Ltd.";

Follow the above steps , Go to the official website of wotong to apply for using a valid code signing certificate pair Appx After the application package is signed , You can upload your app package to Microsoft app store .

Reference resources

1. ^MakeAppx.exe Tools to create application packages   Use MakeAppx.exe Tools to create application packages - MSIX | Microsoft Docs
2. ^ Code signing certificate   Code signing certificate price list ,EV Code signing certificate price , Unit code signature certificate price , How much is the personal code signature certificate? Price quotation - Price list of wotong code signing certificate !