Microsoft Code Signing certificate

[oleksis]

WiX Toolset

• WiX v3

candle -d Platform=x64 -d Version=2.0.0.0 -d "Manufacturer=Oleksis Fraga" -d ToWindows launcher.wxs
light -o launchwin-2.0.0.0.amd64.msi launcher.wixobj

• Wix v4

wix build -o launchwin-2.0.0.0.amd64.msi -d Platform=x64 -d Version=2.0.0.0 -d "Manufacturer=Oleksis Fraga" -d ToWindows launcher.wxs

Workflow

• Setup MSBuild

msbuild /m /p:Configuration=Release /p:Platform="Win32" -verbosity:diag ./Launchers.sln
msbuild /m /p:Configuration=Release /p:Platform="x64" -verbosity:diag ./Launchers.sln

• Setup WiX Toolset

dotnet tool install --global wix --version 4.0.0-rc.2
wix --version
wix extension add WixToolset.UI.wixext
wix extension add WixToolset.Util.wixext
wix extension list

• Setup Python

pip install docutils
python .\buildmsi.py

git tag v2.0.0
git push origin v2.0.0
gh release create v2.0.0 ./*.msi

Sign the MSI

Notes

Ultimately, the package delivered from the Microsoft Store
will be signed using a Microsoft Code Signing certificate
that is trusted by default by every Windows machine.
Microsoft takes care of the signing for you as part of the
submission process.

Ensures all apps that customers acquire and download from
the Microsoft Store have a trusted digital certificate.

Links

• https://learn.microsoft.com/en-us/windows/win32/seccrypto/cryptography-essentials
• https://www.exemsi.com/documentation/sign-your-msi/
• https://www.advancedinstaller.com/msix-digital-signing.html
• https://www.advancedinstaller.com/code-signing-with-signtool.html
• https://www.advancedinstaller.com/msix-certificates-developer.html
• https://www.tmurgent.com/TmBlog/?p=2944
• https://tauri.app/v1/guides/distribution/sign-windows/