You receive an error message when you try to update a Visual Studio 2005 ClickOnce application after the certificate that was used to sign the installation expires (925521)


The information in this article applies to:

  • Microsoft Visual Studio 2005 Standard Edition
  • Microsoft Visual Studio 2005 Professional Edition
  • Microsoft Visual Studio 2005 Express Edition

SYMPTOMS

When you try to update a Microsoft Visual Studio 2005 ClickOnce application after the certificate that you used to sign the installation expires, you receive the following error message:
The deployment identity does not match the subscription.

CAUSE

This problem occurs because you must sign all ClickOnce deployments by using a digital certificate. You cannot use an expired certificate to sign a ClickOnce application. To deploy an update to an application that has an expired certificate, you must assign the application a new certificate. When the new certificate does not match the original certificate, you receive the error message that is mentioned in the "Symptoms" section.

WORKAROUND

To work around this problem, uninstall the ClickOnce application that you signed by using the expired certificate. Then, reinstall the updated ClickOnce application that uses the new certificate.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

Steps to reproduce this problem

  1. Start Visual Studio 2005.
  2. On the File menu, click New, and then click Project.
  3. Click Visual C#, click Windows Application, type WindowsApplication1 in the Name box, and then click OK.
  4. In Solution Explorer, right-click WindowsApplication1, and then click Properties.
  5. Click Signing, and then assign a certificate that expires soon.
  6. In Solution Explorer, right-click WindowsApplication1, and then click Publish. The Publish wizard starts.
  7. On the Where do you want to publish the application? page, type a valid URL, and then click Next. Use the following format for the URL:

    http://ServerName/FolderName

  8. On the Will the application be available offline? page, click the appropriate option.

    Notes
    • If you want to let the user run the application when the user is disconnected from the network, click Yes, this application will be available online or offline. The wizard creates a shortcut for the application on the Start menu.
    • If you want to run the application directly from the publish location, click No, this application is only available online. The wizard does not create a shortcut on the Start menu.
  9. Click Next to continue.
  10. Click Finish to publish the application.
  11. Install the ClickOnce application from the http://ServerName/FolderName/publish.htm URL.
  12. After the certificate expires, repeat steps 6 to 10 to republish the application.
  13. Try to install the ClickOnce application update from the http://ServerName/FolderName/publish.htm URL.
Modification Type:MajorLast Reviewed:9/28/2006
Keywords:kbtshoot kberrmsg kbBug kbprb KB925521 kbAudDeveloper kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.