SigningHelper: error 0x800b0003 while attempting to sign file

[CharlesV]

Hello,

I upgraded from version 2016 to 2020 r2 to generate .msix package.

I followed this procedure https://www.revenera.com/blog/software-installation/its-time-to-start-your-msix-journey-microsoft-announcement/  and I get this error:

Started signing 'C:\Path\to\my\application\MyApplication.msix' ...
SigningHelper: error 0x800b0003 while attempting to sign file
ISDEV : error -1027: Failed to sign MSIX app package 'C:\Path\to\my\application\MyApplication.msix'

The setup.exe is correctly signed.

Any ideas why InstallShield can not sign my .msix package?

Thank you

[Jenifer · Accepted solution]

Hi @CharlesV ,

The error you get goes for:

•  0x800b0003/ -2146762749 / TRUST_E_SUBJECT_FORM_UNKNOWN / "The form specified for the subject is not one supported or known by the specified trust provider"
• Please note that MSIX signing support starts from Windows 10.0.17682 SDK version.Hope you have that pre-requisite installed.
  • https://docs.microsoft.com/en-us/windows/msix/supported-platforms
• You can also try importing the certificate to trusted root CA(Use certificate store option)
• If that doesn't help,can you give it a try by signing the MSIX package using signtool to narrow-down the issue?
  • https://docs.microsoft.com/en-us/windows/msix/package/sign-app-package-using-signtool#using-signtool

Thanks,

Jenifer

[OctavioMercado]

Hello Jenifer,

I am having the same problem.  

I have a Basic MSI type of project, and when I build, my MSI gets signed correctly, but error 0x800b0003 occurs when attempting to sign the MSIX file.

I am using the signtool.exe from the Windows SDK 10.0.18362.0 (C:\Program Files (x86)\Windows Kits\10\bin\10.0.18362.0\x86\signtool.exe).

If I attempt to use the signtool and manually sign the MSIX using the command

<pathToSigntool> sign /fd SHA256 /a /f  <pathToPFX> /p <password> <pathToMSIX>  I get the error:  SignTool Error: This file format cannot be signed because it is not recognized.

Please advise.

Octavio M

[OctavioMercado]

I forgot to mention that I am using InstallShield 2020 R1.

Octavio M

[Jenifer]

Hi @OctavioMercado ,

Does the publisher in your package match your subject name of the signing certificate?

Thanks,

Jenifer

[OctavioMercado]

Hello Jenifer, 

The publisher in my project does match the Signer Information, as shown in the attached files.

In my release, I have a Postbuild Event, in which language transforms are embedded within the MSI.  After embedding the MSTs, I manually sign the MSI. 

I noticed that the MSIX conversion starts, it decompresses the package into a directory as "C:\TMP\AS\<#>\, and under subdirecory "a" I see the uncompressed MSI.  If I right click the MSI to see its properties, it does NOT have a digital signature.   

1.  Could the Postbuild Event be causing the error during signing?

2.  During the MSIX conversion, is it expected for the uncompressed MSI to NOT have a digital signature?

I appreciate your help.

Octavio M