Clickonce App failed update After Certificates expired

Post date: 20-Jul-2009 05:05:15

Just do a renew our Verisign certificate and sign to our clickonce application. But the clickonce app failed to update itself.

I do few google search find there are two possible way to slove this issue.

First one, follow method 3 on http://support.microsoft.com/Default.aspx?kbid=925521.

But that only help the test certificate not the one you buy from Verisign or Thawte. And you can download the "renewcert.exe" from here.

And you need install visual studio express or visual studio 2005/2008 to be able run "renewcert.exe".

The one works it's following this link http://blogs.msdn.com/danielma/archive/2007/03/19/clickonce-and-expired-certificates.aspx

Step 1:

Download and install Microsoft Windows Server 2003 R2 Platform SDK

Step 2:

Retieve private key from lod cert and new cert

Go to folder "cd C:\Program Files\Microsoft Platform SDK for Windows Server 2003 R2\Samples\Security\capicom\vbs"

run "cscript.exe cstore.vbs view" to list all certificate installed on you local pc.

Retrieve the Private Key -> Container name from your old cert as shows below

Step 3:

Go to "cd C:\Program Files\Microsoft Platform SDK for Windows Server 2003 R2\Bin" folder

Execute following command

"signtool sign /manifest /snkc {xx-xx-xx-xx-x} /sncsp "Microsoft Enhanced Cryptographic Provider v1.0" /sha1 xxxxxxxxxx myapp.application"

{xx-xx-xx-xx-x} is the Private Key from old cert

xxxxxxxxxx is the SHA1 hash value

You should get following message when the sign successful:

"Successfully signed: myapp.application"