微软商店需要 pfx 证书

Question

Background information:

I'm trying to package my Desktop application for x86 and x64 into .msixbundle or .appxbundle (not sure what the difference is since the docs that I read do not specify) for the Microsoft Store. I installed the MSIX Packaging Tool. My options are "Sign Device Guard signing version 2", "Sign with a certificate (.pfx), Specify a .cer file (does not sign), and "Do not sign package". It appears "Sign with a certificate (.pfx)" is the only option since the rest are either deprecated\\or do not satisfy signing requirements.

My first question is where do I obtain a pfx (is this the same as a ".crt" certificate?) certificate from a "trusted source" as microsoft specifies since I can't self sign with openssl? Would https://letsencrypt.org/ be sufficient? I guess this will lead to more questions, but that's where I'm at now.

https://docs.microsoft.com/en-us/windows/msix/packaging-tool/create-an-msix-overview

Answer 1

refer to

https://docs.microsoft.com/en-us/mem/configmgr/mdm/deploy-use/import-pfx-certificate-pr n the PFX Certificate page of the Create Certificate Profile Wizard, specify the device key storage provider (KSP):

Install to Trusted Platform Module (TPM) if present Install to Trusted Platform Module (TPM) otherwise fail Install to Windows Hello for Business otherwise fail Install to Software Key Storage Provider