You are currently offline, waiting for your internet to reconnect

How to sign the XAP and AppX versions of the Microsoft Intune Company Portal application

Summary
This article describes the steps necessary to sign the XAP and AppX versions of the Microsoft Intune Company Portal application. The Microsoft Intune Company Portal app helps users search, browse and install apps made available to them by their company through the Microsoft Intune online service from Microsoft.
More information

Signing the XAP version of the Company Portal application

The following section describes what is required to successfully prepare your computer to sign the XAP version of the Company Portal app.
  1. Install Microsoft Visual Studio 2013 or a later version.
  2. Download and install the Microsoft Windows Phone 8.1 SDK from the following location:
    http://www.microsoft.com/en-us/download/details.aspx?id-43719
  3. Copy the following file to C:\Program Files (x86)\Microsoft SDKs\Windows Phone\v8.1\Tools\XapSignTool:

    C:\Program Files (x86)\Windows Kits\8.1\bin\x86\signtool.exe

    Note For reference, the x64 version of the signtool.exe is located in C:\Program Files (x86)\Windows Kits\8.1\bin\x64\signtool.exe although it is not required.
  4. Download the Microsoft Intune Company Portal app for Windows Phone (XAP) from the following location:
    http://www.microsoft.com/en-us/download/details.aspx?id=36060
  5. Install the Microsoft Intune Company Portal for Windows Phone. By default, this copies the following two files to C:\Program Files (x86)\Microsoft Corporation\Windows Intune Company Portal for Windows Phone 8:
    • License.txt
    • SSP.XAP
  6. Copy the SSP.XAP file to C:\Program Files (x86)\Microsoft SDKs\Windows Phone\v8.1\Tools\XapSignTool.
  7. Copy your Symantec Certificate (.pfx) to C:\Program Files (x86)\Microsoft SDKs\Windows Phone\v8.1\Tools\XapSignTool.
  8. Open an elevated CMD prompt (Run as administrator) and then change to the C:\Program Files (x86)\Microsoft SDKs\Windows Phone\v8.1\Tools\XapSignTool directory.
  9. Run the following command to sign the SSP.XAP file:

    XapSignTool.exe Sign /f <Symantec Certificate Here> /p <Password Here> SSP.XAP

    For example, if your certificate was named MyCert.pfx and your password was MyPassword, the command would look like the following:

    XapSignTool.exe Sign /f MyCert.pfx /p MyPassword SSP.XAP

    This will generate a signed version of the SSP.XAP that you can use in System Center Configuration Manager and Microsoft Intune environments.

Signing the AppX version of the Company Portal application

  1. Install Microsoft Visual Studio 2013 with Update 4.
  2. Download and install the Microsoft Windows Phone 8.1 SDK from the following location:
    http://www.microsoft.com/en-us/download/details.aspx?id-43719.
  3. Download and install the Microsoft Intune Company Portal app for Windows Phone 8.1 from the following location:
    https://www.microsoft.com/en-us/download/details.aspx?id=46445.

    This includes the following two files:
    • CompanyPortal.appx
    • Sign-WinPhoneCompanyPortal.ps1


    Note
    By default, the two files above are installed to C:\Program Files (x86)\Microsoft Corporation\Microsoft Intune Company Portal for Windows Phone.
  4. Copy your Symantec Certificate (.pfx) to C:\Program Files (x86)\Microsoft SDKs\Windows Phone\v8.1\Tools\AETGenerator.
  5. Open an elevated CMD prompt (Run as administrator), then navigate to the C:\Program Files (x86)\Microsoft SDKs\Windows Phone\v8.1\Tools\AETGenerator directory.
  6. Run AETGenerator.exe in the following format:

    AETGenerator.exe <path to Symantec Cert> <Password>

    For example, if your certificate was located in C:\certificate and named MyCert.pfx, and your password was MyPassword, the command would look like the following:

    AETGenerator.exe C:\certificate\MyCert.pfx MyPassword

    This command will generate three files:
    • AET.aet
    • AET.aetx
    • AET.aetxAET.xml
    All these files are necessary to sign the AppX version of the Company Portal application.
  7. Copy the three files above to C:\Program Files (x86)\Microsoft Corporation\Microsoft Intune Company Portal for Windows Phone.
  8. From an elevated CMD prompt, launch PowerShell by running the powershell command.
  9. Navigate to C:\Program Files (x86)\Microsoft Corporation\Microsoft Intune Company Portal for Windows Phone.
  10. Run the Powershell Script Sign-WinPhoneCompanyPortal.ps1 in the following format:

    PS C:\Signing> .\Sign-WinPhoneCompanyPortal.ps1 -InputAppx "C:\temp\CompanyPortal.appx" -OutputAppx "C:\Temp\CompanyPortalEnterpriseSigned.appx" -PfxFilePath "C:\temp\CodeSigningCert.pfx" -PfxPassword Password -AetxPath C:\temp\AET.aetx

    This will generate a signed version of the AppX file named CompanyPortalEnterpriseSigned.appx that you can use in System Center Configuration Manager and Microsoft Intune environments.
ConfigMgr 2012 R2 Windows Intune
Properties

Article ID: 3106918 - Last Review: 11/16/2015 06:17:00 - Revision: 1.0

Microsoft Intune, Microsoft System Center 2012 Configuration Manager, Microsoft System Center 2012 Configuration Manager Service Pack 1, Microsoft System Center 2012 Configuration Manager Service Pack 2, Microsoft System Center 2012 R2 Configuration Manager, Microsoft System Center 2012 R2 Configuration Manager Service Pack 1

  • kbexpertiseadvanced kbsurveynew kbtshoot KB3106918
Feedback
html>