CODEWITHSUNDEEP
windows-installertransformdigital-signature
StrAbZ
StrAbZ

Reputation: 589

MSI applying transform removes signature

I've run into a problem with digitally sign msi setups.

I sign my setup before shipping it, so the UAC recognize my certificate when the setup starts. But it seems to remove the signature once I apply a transform to this setup to provide it in other language.

It seems to me this is a correct behavior since the msi setup is modified after being signed.

Do you know any way to avoid this ? Keeping the msi signed after the transform.

I already thought about distributing my setup in different language in a all in one pack, but it will grow really fast (a setup for x64 and x86 in each language).

Thank you !

Upvotes: 2

Views: 815

Answers (1)

Michael Urman
Michael Urman

Reputation: 15905

The .msi file itself should remain signed, but Windows Installer will correctly report that the installation is, collectively, unsigned. To have the aggregate treated as signed, sign the .mst file.

Upvotes: 4

Related Questions