[wix-users] SWID Tags

[Phill Hogland]

With Wix 3.10.0.2026 I am investigating adding swid:tag back into my Bundle.   I found a draft of the spec at:
http://csrc.nist.gov/publications/PubsDrafts.html#NIST-IR-8060

(and the page that took me to that link warned that he link might be broke when a new draft is posted by NIST.)

I find the draft rather confusing with lots of MUSTs, which I don't see a way to set using the WixTagExtension.  (To be fair I have not compiled this yet or installed it so, but I don't know how wix would know some of this stuff without entering it.

So for the following example form the spec, I guess I would use the following wix authoring.  Does this seem correct?

Does the 'globally unique tag identifier' get generated?
Seems like Entity/@role is required  ?

My bundle install 32 bit apps, 64 bit apps, and app data files.  It seems like I should only set the 32 bit install location.  Is that the intent?

They also talk about the importance of signing the tags, particularly a "Corpus" tag, but I get the sense that WixTagExtension only supports a "Primary" or "Patch" tag and not "Corpus" or "Supplemental".

<swid:Tag Regid="acme.com" InstallPath="[InstallFolder]"/>

>From page 16 of:
NISTIR 8060 (Second DRAFT) Guidelines for the Creation of Interoperable SWID Tags
Example of basic Primary tag

772 <SoftwareIdentity
773 xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd"
774 name="ACME Roadrunner Management Suite Coyote Edition"
775 tagId="com.acme.rms-ce-v4-1-5-0"
776 tagVersion="0"
777 version="4.1.5">
778 <Entity
779 name="The ACME Corporation"
780 regid="acme.com"
781 role="tagCreator softwareCreator"/>
782 ...
783 </SoftwareIdentity>
784

Thanks for all of the work.  The business does not require that I use SWID tags yet, but I would like to do it properly so just looking for advice.
Thanks
Phill