WiX: Digitally Sign BootStrapper project

Question

I have a project for which I have built a WiX msi file. I also have a WiX bootstrapper (exe file) that checks for the existence of C++ 2005, installs it if not found and th

Answer 1

Updating for VS2019, and based on @jchoover's answer, here is what I got working.

This leverages some MSBuild property function work by @webjprgm here that makes finding signtool.exe more generic across Windows Kit versions. As mentioned by @karfus in a comment above, adding the SignOutput section is the incantation that kicks everything off.

This goes at the end of your bootstrap.wixproj file, before the closing /Project tag.

  
   
    true
  

  
  
      
        $([MSBuild]::GetRegistryValueFromView('HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Kits\Installed Roots', 'KitsRoot10', null, RegistryView.Registry32, RegistryView.Default))
        $([MSBuild]::GetRegistryValueFromView('HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Kits\Installed Roots', 'KitsRoot81', null, RegistryView.Registry32, RegistryView.Default))
        $([MSBuild]::GetRegistryValueFromView('HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Kits\Installed Roots', 'KitsRoot', null, RegistryView.Registry32, RegistryView.Default))
        $(WindowsKitsRoot)bin\x64\
        $(WindowsKitsRoot)bin\$(Platform)\
        $([System.IO.Directory]::GetDirectories('$(WindowsKitsRoot)bin',"10.0.*"))
        $(SignToolPathBin.Split(';').Length)
        $([MSBuild]::Add(-1, $(SignToolPathLen)))
        $(SignToolPathBin.Split(';').GetValue($(SignToolPathIndex)))\
        $(SignToolPathBase)x64\
        $(SignToolPathBase)$(Platform)\