8
6
Fork
You've already forked windows
1

Microsoft Store entry #264

Open
opened 2025年05月08日 19:40:08 +02:00 by sklemer · 1 comment

We got some questions about adding eduVPN to the Microsoft Store as there is a special Windows mode called 'S' that is promoted as 'faster' and 'more secure'. It only allows Store Apps...

Information about the mode:
https://support.microsoft.com/en-us/windows/windows-10-and-windows-11-in-s-mode-faq-851057d6-1ee9-b9e5-c30b-93baebeebc85

And information how to add apps to the MS store:
https://learn.microsoft.com/en-gb/windows/apps/publish/?tabs=individual%2Cmsix-pwa-getting-started

I remember some problems with getting the eduroam CAT app into the store as they disallow quiet a lot of low level API calls; so it might be a no go; in this case it would at least be documented in the issue :).

We got some questions about adding eduVPN to the Microsoft Store as there is a special Windows mode called 'S' that is promoted as 'faster' and 'more secure'. It only allows Store Apps... Information about the mode: https://support.microsoft.com/en-us/windows/windows-10-and-windows-11-in-s-mode-faq-851057d6-1ee9-b9e5-c30b-93baebeebc85 And information how to add apps to the MS store: https://learn.microsoft.com/en-gb/windows/apps/publish/?tabs=individual%2Cmsix-pwa-getting-started I remember some problems with getting the eduroam CAT app into the store as they disallow quiet a lot of low level API calls; so it might be a no go; in this case it would at least be documented in the issue :).
Collaborator
Copy link

Hi, there was this discussion about Windows S, but some years ago. So, I have briefly reviewed the store policies available here:
https://learn.microsoft.com/en-us/windows/apps/publish/store-policies

eduVPN client depends on Microsoft .NET Framework 4.8 (4.8.1 on ARM64). This is a subject of further research whether this dependency is allowed. My uneducated guess would be: if .NET Framework 4.8 can be installed from the Microsoft Store, an app could list it as one of its dependencies?

Next, the eduVPN client packs a couple of NT services that run elevated and are essential to establish and run the VPN tunnels for non-elevated users. Those services are no-go for the Microsoft Store policy. I see the deal breaker here.

It also packs Wintun and wireguard-nt drivers, but those drivers are WHQL-signed. So, the drivers should actually be allowed as the dependency. Unfortunately, they need those elevated services to get installed.

Leaving this issue open, should there be any more educated suggestions than mine in the future.

Hi, there was this discussion about Windows S, but some years ago. So, I have briefly reviewed the store policies available here: https://learn.microsoft.com/en-us/windows/apps/publish/store-policies eduVPN client depends on Microsoft .NET Framework 4.8 (4.8.1 on ARM64). This is a subject of further research whether this dependency is allowed. My uneducated guess would be: if .NET Framework 4.8 can be installed from the Microsoft Store, an app could list it as one of its dependencies? Next, the eduVPN client packs a couple of NT services that run elevated and are essential to establish and run the VPN tunnels for non-elevated users. Those services are no-go for the Microsoft Store policy. I see the deal breaker here. It also packs Wintun and wireguard-nt drivers, but those drivers are WHQL-signed. So, the drivers should actually be allowed as the dependency. Unfortunately, they need those elevated services to get installed. Leaving this issue open, should there be any more educated suggestions than mine in the future.
Sign in to join this conversation.
No Branch/Tag specified
master
study/no-token-import
ver/3.x
govVPN
ver/3.3.0.x
ver/2.x
ver/1.x
4.6
4.5.99.8
4.5.99.7
4.5.99.6
4.5.99.5
4.5.99.4
4.5.99.3
4.5.99.2
4.5.99.1
4.5.99.0
4.5
4.4.99.4
4.4.99.3
4.4.99.2
4.4.99.1
4.4.99.0
4.4
4.3.99.1
4.3.99.0
4.3.2
4.3.1
4.3
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1
4.0
3.255.23
3.255.22
3.255.21
3.255.20
3.255.19
3.7
3.6.2
3.6.1
3.255.18
3.255.17
3.255.16
3.255.15
3.6
3.255.14
3.5
3.255.13
3.4.3
3.255.12
3.255.11
3.255.10
3.255.9
3.255.8
3.255.7
3.255.6
3.255.5
3.255.4
3.255.3
3.255.2
3.4.2
3.4.1
3.255.1
3.255
3.4
3.3.8
3.3.7
3.3.6
3.3.5
3.3.4
3.3.0.1
3.3.3
3.3.2
3.3.1
3.3
3.2.2
3.2.1
3.2
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0
2.255.6
2.255.5
2.255.4
2.255.3
2.255.2
2.255.1
2.1.4
2.255.0
2.1.3
2.1.2
2.1.1
2.1
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0
1.255.11
1.255.10
1.255.9
1.0.39
1.255.8
1.255.7
1.255.6
1.255.5
1.0.38
1.255.4
1.0.37
1.255.3
1.255.2
1.255.1
1.255.0
1.0.36
1.0.34
1.0.35
1.0.33
1.0.32
1.0.31
1.0.30
1.0.29
1.0.28
1.0.27
1.0.26
1.0.25
1.0.24
1.0.23
1.0.22
1.0.21
1.0.20
1.0.19
1.0.18
1.0.17
1.0.16
audit/2017-12
1.0.15
1.0.14
1.0.13
1.0.12
1.0.11
1.0-alpha8
1.0-alpha6
1.0-alpha5
1.0-alpha4a
1.0-alpha3
1.0-alpha2a
1.0-alpha1
1.0-alpha
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eduVPN/windows#264
Reference in a new issue
eduVPN/windows
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?