Sign ClickOnce manifests with Visual Studio
From the command prompt reach to the directory where ECGetCert.exe is located.
Run the command: ECGetCert.exe evcodesigning
Here, evcodesigning is the certificate name which we are using for codesigning purpose
This command will save evcodesigning.pem (certificatename.pem) file in the same directory.
Open certmgr.msc and navigate to Personal -> certificates. If there is no certificate folder, just right click on personal -> All Tasks -> Import
A Certificate import wizard Opens. Click on next, the store location here is by default current user.
In the next page browse for the certificate. It should be saved in the same directory where ECGetCert.exe is located. From there select evcodesigning.pem (certificatename.pem). If you’re unable to see the file select all files at the bottom, instead of X.509 certificate. Once the certificate is selected click next.
In the other page, ensure "Place all certificates in the following store" is selected and under that, Certificate store is set to Personal. Click on next and then Click on Finish. You'll see a dialogue box saying the import was successful.
Once the certificate import is done, you need thumbprint value of your certificate. Click on Personal -> Certificates -> and then the imported certificate. Navigate to “Details” and scroll down to thumbprint. You can copy the value.
Return to command prompt. Run the following command. Ensure that you place the Thumbprint of your certificate in your command.
certutil -f -repairstore -csp "Encryption Consulting Key Storage Provider" -user "My" 79656a9ce126fd0d1bb33f4dc73dba308f58b3ac
In the Solution Explorer, Right Click on your project and navigate to Publish. Click on it.
A new window opens. Select ClickOnce and click on Next.
In the next page, you can choose a publish location or leave the default bin\publish and click on Next.
You can choose the Install Location as per your choice or leave the default. Click on Next.
You can select your settings in the next tab as you like and Click Next.
In Sign manifests, check the box “Sign the ClickOnce manifests” and click on select certificate from store.
A dialogue box opens with certificate, which was initially imported. Click OK to proceed.
You can now see the certificate details in Sign manifests.
You’ll see Publish profile creation progress and a green tick when successful
You can see the Publish Profile created.
We have successfully signed ClickOnce manifests with Visual Studio.