mcseforsale
Posts: 57
Joined: Wed Mar 27, 2013 10:53 pm

Re: Azure DevOps and Signing

Mon Jun 29, 2020 6:56 pm

Catalin wrote:
Tue Jun 02, 2020 10:53 am
Hello,

Thank you for your followup on this!

I have forwarded it to the development team.

I will keep you guys updated with the information I receive from the development team.

Best regards,
Catalin
Has there been any movement on this yet? Our organization is trying to migrate to Azure DevOps and this is one of our key issues.

Thanks,
Andrew

Catalin
Posts: 6537
Joined: Wed Jun 13, 2018 7:49 am

Re: Azure DevOps and Signing

Wed Jul 01, 2020 2:59 pm

Hello Andrew,
Has there been any movement on this yet?
Yes. We are currently working on this.

Please note that this integration is quite complex, therefore I'm afraid I can not give you an estimation on when this will be ready.

I will, however, update this thread as soon as this feature will be implemented in Advanced Installer.

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

mcseforsale
Posts: 57
Joined: Wed Mar 27, 2013 10:53 pm

Re: Azure DevOps and Signing

Fri Jul 31, 2020 3:49 pm

Thanks for the update. We're still waiting on this functionality.

AJ

Catalin
Posts: 6537
Joined: Wed Jun 13, 2018 7:49 am

Re: Azure DevOps and Signing

Mon Aug 03, 2020 12:18 pm

You are always welcome, AJ!

I know you guys are waiting for this.

I'd say we are pretty close on implementing this. :)

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

hve
Posts: 10
Joined: Tue Aug 04, 2020 4:35 pm

Re: Azure DevOps and Signing

Wed Aug 05, 2020 10:59 am

Hi Catalin,
We're looking forward for this new feature :)
Please let us know if we can assist you in any way.

BR
Henrik

Catalin
Posts: 6537
Joined: Wed Jun 13, 2018 7:49 am

Re: Azure DevOps and Signing

Wed Aug 05, 2020 1:52 pm

Hello Henrik and welcome to our forums,
Please let us know if we can assist you in any way.
Thank you very much for your offer to help. We are pretty close of implementing this feature into Advanced Installer, therefore I believe we do not require any additional help/information.

If anything comes up, I will let you guys know.

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

hve
Posts: 10
Joined: Tue Aug 04, 2020 4:35 pm

Re: Azure DevOps and Signing

Thu Aug 06, 2020 9:51 am

Until the new feature is released, I'd like to let others know how to use the AzureSignTool.exe by adding a post build event to be executed before the EXE packing:

Command: AzureSignTool.exe
Arguments: sign -du https://(yoursite.com) -kvu https://(key vault).vault.azure.net -kvi (app registration Client Id) -kvs (secret) -kvc (certificate name) -tr http://timestamp.digicert.com -v "[|AI_AIP_FOLDER]\(Setup file name).msi"

BR
Henrik

Catalin
Posts: 6537
Joined: Wed Jun 13, 2018 7:49 am

Re: Azure DevOps and Signing

Thu Aug 06, 2020 3:24 pm

Hello Henrik,

Thank you very much for your followup on this and for sharing your solution with us.

I am sure this will come in handy for some of our users until this will be implemented in Advanced Installer. :)

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

jjardina
Posts: 11
Joined: Wed Mar 13, 2019 5:35 pm

Re: Azure DevOps and Signing

Mon Aug 24, 2020 5:26 pm

@Catalin,
Can you tell me when this will be available?
Are your guys indeed currently working on this?
Is there anything I can provide that will move this along?

We are near release on our new commercial product and this is more than a mild inconvenience.

mcseforsale
Posts: 57
Joined: Wed Mar 27, 2013 10:53 pm

Re: Azure DevOps and Signing

Thu Aug 27, 2020 3:24 pm

We are currently beginning testing on this feature. jjardina is unable to view these responses for some reason.

AJ

Catalin
Posts: 6537
Joined: Wed Jun 13, 2018 7:49 am

Re: Azure DevOps and Signing

Mon Aug 31, 2020 11:13 am

Hello guys,

First of all, please accept my apologies for the delayed reply (I was off last week).

This feature has been added in Advanced Installer 17.4:

https://www.advancedinstaller.com/download.html

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

hthomas
Posts: 15
Joined: Tue Sep 08, 2020 12:22 pm

Re: Azure DevOps and Signing

Tue Sep 08, 2020 12:33 pm

Hi, I've read that Azure Key Vault is now supported. Could you point me to a tutorial about the recommended way to set it up in Azure DevOps?

I was able to sign my app locally using the "User From Azure Key Vault" option within AI. I also read about calling AzureSigntool in a task as a workaround. But I was wondering if it is possible to have the Vault details set within the AIP file and just pass the secret to the Advanced Installer Build task.

Catalin
Posts: 6537
Joined: Wed Jun 13, 2018 7:49 am

Re: Azure DevOps and Signing

Tue Sep 08, 2020 4:04 pm

Hello Thomas and welcome to our forums,

When asking about how to set this from Azure DevOps, I am assuming that you want to pass the Client Secret associated with your App ID.
Client Secret:
When a file is signed, the user will be prompted to enter the Client secret associated with the application identified with ID - App ID. The Client secret is not stored in the project file.
When using Advanced Installer from command line, you can set the Client Secret using the following command: SetAzureKeyVaultSecret

Due to the fact that the Client Secret is not stored in the project file, SetAzureKeyVaultSecret command can be used only from a .AIC command file.

You can find more information about this in our "Digital Signature" page --> "Use from Azure Key Vault" section

Hope this helps.

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

hthomas
Posts: 15
Joined: Tue Sep 08, 2020 12:22 pm

Re: Azure DevOps and Signing

Thu Sep 10, 2020 8:54 am

Thanks Catalin, I set up my task using the following commands in the Command Line Arguments section:

Code: Select all

SetVersion $(Version).$(Build.BuildId)
SetAzureKeyVaultSecret $(Secret)
And I get this error:

Code: Select all

##[error]Failed to execute Advanced Installer task. Error: SetVersion 1.2.3.4826
SetAzureKeyVaultSecret ***
A required argument is missing: <azure_key_vault_app_client_secret>.
It seems that the secret Azure passes to AI is empty...but in the Azure page I see it has the right value.
But then this the right way to do it, isn't it?

Catalin
Posts: 6537
Joined: Wed Jun 13, 2018 7:49 am

Re: Azure DevOps and Signing

Thu Sep 10, 2020 1:19 pm

Hello Thomas,

Please note that the Client Secret is not stored in the Advanced Installer project.

This is the reason why the SetAzureKeyValutSecret command can only be used from a .AIC command file.

Did you use such file in order to set the Client Secret? If not, please use it and let me know the outcome.

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Return to “Building Installers”