
With version 10.0.12 (10.0.507.20001). I create a custom certificate file followed by instruction in Customization.settings.
<!--
The name of the cert must match the name of the publisher of the package which is the same as the CustomPublisher above.
blogs.msdn.com/.../create-a-windows-store-appx-package-and-sign-it.aspx
msdn.microsoft.com/.../jj835832(v=vs.85).aspx
The sample cert was generated like this:
MakeCert /n "CN=Contoso Ltd." /r /h 0 /eku "1.3.6.1.5.5.7.3.3,1.3.6.1.4.1.311.10.3.13" /e ""12/31/2037"" /sv appxsignkey.pvk appxsignkey.cer
empty password as just for testing (Optional parameters for password protected cert [/pi "Password" /po "password"])
Pvk2Pfx.exe /pvk appxsignkey.pvk /spc appxsignkey.cer /pfx appxsignkey.pfx /pi ""
To use signing cert from certificate store, add thumbprint of the certificate below to ModernPOSPackageCertificateThumbprint property and
comment out ModernPOSPackageCertificateKeyFile property.
If certificate being used is password protected, then this method must be used.
Use the following command get the Thumpprint of the certificate
powershell Get-ChildItem -Path Cert:\CurrentUser\My
ModernPOSPackageCertificateThumbprint cannot be used in VSTS builds, because the certificate can't be installed on the VSTS hosted machines.
Instead the certificate must be restored to the file system using a secret manager, such as Azure KeyVault, and the argument ModernPOSPackageCertificateKeyFile should specify the path to the certificate.
When consuming the signing certificate via ModernPOSPackageCertificateKeyFile, leave the ModernPOSPackageCertificateThumbprint variable empty.
-->
Then, add its trumbprint into: -
<ModernPOSPackageCertificateKeyFile Condition="'$(ModernPOSPackageCertificateKeyFile)' == ''"></ModernPOSPackageCertificateKeyFile>
<ModernPOSPackageCertificateThumbprint Condition="'$(ModernPOSPackageCertificateThumbprint)' == ''">0567C6AFA10B7CE67E509D629C4402D188AB034F</ModernPOSPackageCertificateThumbprint>
<SelfServicePackageCertificateKeyFile Condition="'$(SelfServicePackageCertificateKeyFile)' == ''"></SelfServicePackageCertificateKeyFile>
<SelfServicePackageCertificateThumbprint Condition="'$(SelfServicePackageCertificateThumbprint)' == ''">0567C6AFA10B7CE67E509D629C4402D188AB034F</SelfServicePackageCertificateThumbprint>
I import the new cert file to
After I built package, the signing cert show in Digital Signatures tab.
But once I install it and try to activate MPOS, I got errors. Below logs are respectively from Event Viewer > Application and Services Logs > Microsoft > Dynamics > Commerce-ModernPos > Operation
Seems like AAD can't accept the EXE with custom cert. With same Identify Providers in HQ, I can activate CPOS but can't activate MPOS.
Is there anyone experience this problem? Please kindly advise the solution.
Hi AeyPKA,
It appears you are using a custom MPOS.
As this is the case, you would want to follow this article: docs.microsoft.com/.../retail-pos-activation-changes