How to get a certiciate to build WinUI3 store application

Question

How to get a certiciate to build WinUI3 store application

Peterjc 91

Hi, I am nearing completing my WinUI3 application to replace my existing UWP store application.

However I am (once again) facing certificate issues, which is causing the build to fail when building on my build server (it build fine via Visual studio on my dev machine).

So, I have a separate package project.

I have associated my app with the store, selecting my existing application (can't upload image for some reason image upload is not working)..

I have double clicked on the
Package.appxmanifest
, and select Choose a Certificate. I don't use create, as this is a self signed cert (which is useless).

So I select "Select from store" | more choices and I find a certificate there that has the correct "GUID"/ID that matches the store (fist go I selected another cert I had there but the the ackage ID did not match that of the store, so upload was rejected) .
Looking at the properties it says this certificate is not trusted, so export it and install on the build machine.

But when I build, I get the following error

error : Certificate does not match supplied signing thumbprint: AAAAAAAAAAAAAABBBBBBBBBBBBBBBBBBBBB

AAAAAAAAAAAAAABBBBBBBBBBBBBBBBBBBBB is not the real thumbprint (not sure if this need ot be kept secret so just put in some dummy text)

So, my question, is really just, how to I get a certificate (and use it) to build the application for the store (and also have the _Test version we can sideload to test)

Thanks in advance

Anonymous

2022-12-06T06:10:03.51+00:00

If you've associated your app with the store, then you don't need to select certificate again. After the association, your app should already get the correct certification automatically. Please also remember to delete the line for PhoneIdentity in the manifest file. It will cause compilation failure.
Peterjc 91 Reputation points

2022-12-06T06:27:49.39+00:00
Hi, thanks for that.

I just associated the app with the store again, and it does not seem to create any new certificate for me to use.

I am building using

/p:PackageCertificateKeyFile=<certificate_path\\MyApp (Package)_TemporaryKey.pfx> /p:PackageCertificatePassword=mypassword

Perhaps my
MyApp (Package)_TemporaryKey.pfx
is an incorrect certificate (it was a while ago I got it)? If so, how can I get/create a new one I can use?
Anonymous

2022-12-06T06:39:39.273+00:00

It works when you build on the dev PC and it only happens when you build on a server, right? In the build server, you are not using the Visual Studio to build just using the MS build directly?
Peterjc 91 Reputation points

2022-12-06T07:03:08.377+00:00

Yes that is correct, I am using msbuild from the command line to build on the build server.

I am just trying the following...

I went into Create App packages / Sideloading, and removed the certificate I was using, and created a new one.

This created a new MyApp (Package)_TemporaryKey.pfx. I then associated with the store again, checked in everything, and am now trying to build on the build server again, with the command line pointing to this new certificate. That would onw build buy the store still said invalid CN.

I change the CN when creating the temp certificate and am currently again.
Peterjc 91 Reputation points

2022-12-06T08:00:32.95+00:00

OK, I think that has done it.

So the steps were as above, you need to create the temp certificate using the correct CN, and only then associate with the store.

You can then use this temp certificate to build with.

Your answer

Anonymous

2022-12-06T06:10:03.51+00:00

If you've associated your app with the store, then you don't need to select certificate again. After the association, your app should already get the correct certification automatically. Please also remember to delete the line for PhoneIdentity in the manifest file. It will cause compilation failure.
Peterjc 91 Reputation points

2022-12-06T06:27:49.39+00:00

Hi, thanks for that.

I just associated the app with the store again, and it does not seem to create any new certificate for me to use.

I am building using

/p:PackageCertificateKeyFile=<certificate_path\\MyApp (Package)_TemporaryKey.pfx> /p:PackageCertificatePassword=mypassword

Perhaps my
MyApp (Package)_TemporaryKey.pfx
is an incorrect certificate (it was a while ago I got it)? If so, how can I get/create a new one I can use?
Anonymous

2022-12-06T06:39:39.273+00:00

It works when you build on the dev PC and it only happens when you build on a server, right? In the build server, you are not using the Visual Studio to build just using the MS build directly?
Peterjc 91 Reputation points

2022-12-06T07:03:08.377+00:00

Yes that is correct, I am using msbuild from the command line to build on the build server.

I am just trying the following...

I went into Create App packages / Sideloading, and removed the certificate I was using, and created a new one.

This created a new MyApp (Package)_TemporaryKey.pfx. I then associated with the store again, checked in everything, and am now trying to build on the build server again, with the command line pointing to this new certificate. That would onw build buy the store still said invalid CN.

I change the CN when creating the temp certificate and am currently again.
Peterjc 91 Reputation points

2022-12-06T08:00:32.95+00:00

OK, I think that has done it.

So the steps were as above, you need to create the temp certificate using the correct CN, and only then associate with the store.

You can then use this temp certificate to build with.

Share via

How to get a certiciate to build WinUI3 store application

Your answer