UWP - https certification valiation issue

Question

UWP - https certification valiation issue

Vinod Sahu 0

I am trying to call an https api on a payment device, it returns a certificate signed by intermediate CA and that signed by root CA.

I have installed root CA in trusted store of windows, added capability in WPF manifest.

It returns error - Partial chain .

This whole setup works in a console app.

If I add the intermediate certificate in trusted store, it works fine.

Are there any configs that can be set in wpf to fetch intermediate certifcate similar to console app.

Harry Vo (WICLOUD CORPORATION) 405 Reputation points Microsoft External Staff

2025-06-27T08:33:17.8033333+00:00

Hello Vinod Sahu,

You mentioned "WPF manifest" in your question, but WPF applications don't use manifests in the same way UWP applications do. Based on your description of the sandboxed behavior and certificate validation issues, it sounds like you might be working with a UWP application rather than WPF. Could you confirm which framework you're actually using?

Thank you!
Harry Vo (WICLOUD CORPORATION) 405 Reputation points Microsoft External Staff

2025-07-03T10:57:25.62+00:00

Hi @Vinod Sahu ,
Do you have any updates yet? Let me know soon so I can give you the support you need!
Thank you!
Harry Vo (WICLOUD CORPORATION) 405 Reputation points Microsoft External Staff

2025-07-08T04:21:05.47+00:00

Hi @Vinod Sahu , have you solved your issues yet? Let me know so I can give you the support you need! Thank you!
Harry Vo (WICLOUD CORPORATION) 405 Reputation points Microsoft External Staff

2025-07-23T03:05:43.1933333+00:00

Hi @Vinod Sahu, it's been a long time, have you been able to resolve the issues you were facing? Please let me know if you still need any assistance—I'm here to help! Thank you!

1 answer

Your answer

Harry Vo (WICLOUD CORPORATION) 405 Reputation points Microsoft External Staff

2025-06-27T08:33:17.8033333+00:00

Hello Vinod Sahu,

You mentioned "WPF manifest" in your question, but WPF applications don't use manifests in the same way UWP applications do. Based on your description of the sandboxed behavior and certificate validation issues, it sounds like you might be working with a UWP application rather than WPF. Could you confirm which framework you're actually using?

Thank you!
Harry Vo (WICLOUD CORPORATION) 405 Reputation points Microsoft External Staff

2025-07-03T10:57:25.62+00:00

Hi @Vinod Sahu ,
Do you have any updates yet? Let me know soon so I can give you the support you need!
Thank you!
Harry Vo (WICLOUD CORPORATION) 405 Reputation points Microsoft External Staff

2025-07-08T04:21:05.47+00:00

Hi @Vinod Sahu , have you solved your issues yet? Let me know so I can give you the support you need! Thank you!
Harry Vo (WICLOUD CORPORATION) 405 Reputation points Microsoft External Staff

2025-07-23T03:05:43.1933333+00:00

Hi @Vinod Sahu, it's been a long time, have you been able to resolve the issues you were facing? Please let me know if you still need any assistance—I'm here to help! Thank you!

Answer 1

Hi @Vinod Sahu ,

My name is Harry, Support Engineer who specialize in UWP (Universal Windows Platform). Thank you for reaching out on Microsoft Q&A!

According to your question, it seems like you are encountering the Partial chain HTTPS certificate validation error because the intermediate certificate not explicitly installed.

This whole setup works in a console app.

Console apps often use the default .NET HttpClient or WebRequest stack to automatically retrieve intermediate certificate via AIA (Authority Information Access) if they are not sent by the server.

Similarly, WPF apps can also use AIA to retrieve intermediate certificate like console apps, but this behavior is not guaranteed as it depends on many factors including HTTP handler, system policy, network access, ...

Are there any configs that can be set in wpf to fetch intermediate certifcate similar to console app.

I'm very sorry but there are no WPF-specific configs or manifest settings that control how intermediate certificate are fetched. Fortunately, there are other possible solutions for this issue:

Ensure the server sends the full chain (i.e., includes the intermediate certificate in the TLS handshake). This is the most reliable solution!
Manually install the intermediate certificate in the Local Machine or trusted store like you mentioned in your question.

Since your title mentions UWP and I'm not sure are you working on UWP or not: Unlike WPF, UWP apps run in a sandbox and do not fetch intermediate certificate automatically. They only rely entirely on the certificate chain provided by the server. Additionally, UWP manifest capabilities do not affect certificate chain behavior.

However, the two solutions I mentioned above also apply to UWP. Please give it a try!

You can also find relate documentations here:

Authority Information Access in Windows | Microsoft Learn

Intro to certificates - UWP applications | Microsoft Learn

I hope this helps you get things back on track quickly! If you agree with our suggestion, feel free to interact with the system accordingly!

Share via

UWP - https certification valiation issue

1 answer

Your answer