[wix-users] How to sign selective MSI packages in a bundle

[Rob Mensching]

The bundle must be created _after_ you are done modifying the contents of the bundle. Said another way, do not modify the contents of a bundle _after_ the bundle has been created. The bundle has security features in place that view changes to its content as tampering and fail the bundle’s install.

From: Tigran Galoyan <tigran.galoyan at gmail.com>
Sent: Thursday, May 26, 2022 5:57 AM
To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
Cc: Rob Mensching <rob at firegiant.com>
Subject: Re: [wix-users] How to sign selective MSI packages in a bundle

I wonder though if there is a way to sign the MSIs after the build is complete and the artifacts (the bundle setup executables are generated)?

On Wed, May 25, 2022 at 5:10 PM Rob Mensching via wix-users <wix-users at lists.wixtoolset.org<mailto:wix-users at lists.wixtoolset.org>> wrote:
Just to be clear (and pedantic): You do not need to sign MSIs that ship in a bundle. The bundle should suffice.

-----Original Message-----
From: wix-users <wix-users-bounces at lists.wixtoolset.org<mailto:wix-users-bounces at lists.wixtoolset.org>> On Behalf Of Rob Mensching via wix-users
Sent: Wednesday, May 25, 2022 2:09 PM
To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org<mailto:wix-users at lists.wixtoolset.org>>
Cc: Rob Mensching <rob at firegiant.com<mailto:rob at firegiant.com>>
Subject: Re: [wix-users] How to sign selective MSI packages in a bundle

You sign MSIs the same as everything. In a .wixproj, you can override the `SignMsi` target to call out to signtool or whatever tooling you're using to sign.



- - - - - - - - - - - - - - -
I provide short answers on wix-users. Full commercial support is offered by FireGiant at http://www.firegiant.com/services

-----Original Message-----
From: wix-users <wix-users-bounces at lists.wixtoolset.org<mailto:wix-users-bounces at lists.wixtoolset.org>> On Behalf Of Tigran Galoyan via wix-users
Sent: Wednesday, May 25, 2022 2:04 PM
To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org<mailto:wix-users at lists.wixtoolset.org>>
Cc: Tigran Galoyan <tigran.galoyan at gmail.com<mailto:tigran.galoyan at gmail.com>>
Subject: [wix-users] How to sign selective MSI packages in a bundle

Hi,

We sign our setup executables at the very end of the build process (first the engine then the bundle itself). However, since the bundles consist of many other MSI-s that we produce then when we try later after installation to launch some applications installed with those MSI packages, then if the launch requires elevated privileges then UAC pops up the window where it states that the publisher is unknown. Apparently, the setup executable itself is signed and shows the correct publisher.

How can we also sign the MSI packages (no all that are in a bundle, but those that we generate) that later our applications show the correct publisher at launch time (in the UAC popup)?

Thanks,
Tigran

____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant http://www.firegiant.com/

____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant http://www.firegiant.com/

____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant http://www.firegiant.com/