How to sign MSIX AppPackage in Visual Studio 2022

Question

When creating a Winui 3 AppPackage using the Create App Package wizard in Visual Studio 2022, it asks for a Key Vault URI.

I have a Trusted Signing resource in Entera, but I can't find any information about getting a Key Vault URI to this resource in the Azure Control Panel.

Do we need to create an Azure Key Vault as well? How do we then add our Trusted Signing certificate to the vault?

NB The Trusted Signing certificate is working from GitHub Actions.

// Björn

Answer 1

Meha is correct: VS' Create App Package wizard doesn't connect directly to Trusted Signing, but it can create an unsigned package which you can sign later with signtool and Trusted Signing. You'll need to make sure that the package's publisher matches what you use for Trusted Signing.

Set up SignTool to use Trusted Signing

Answer 2

@Givary-MSFT are you familiar with how can we tag someone who is familiar with the Create App Package wizard here if there's an alternate to use a certificate that's outside of Key Vault URI?

@Bjorn - Trusted Signing certificates are stored in mHSMs and not in keyvault.