Signtool bundle error.

[saiprabhur]

Wix toolset version 3.11.2
We have bootstrapper application to create bundle setup.

<bal:Condition Message="Setup could not be installed in 32 bit OS">VersionNT64</bal:Condition>

<Chain>
  <MsiPackage DisplayInternalUI="no" Visible="yes" SourceFile="MyApplicationSetup.msi" InstallCondition="WINDOWS10_OR_NEWER_DETECTED" Compressed="yes" Vital="yes">
    <MsiProperty Name="WIXBUNDLEORIGINALSOURCE" Value="[WixBundleOriginalSource]" />
  </MsiPackage>
</Chain>

<util:RegistrySearchRef Id="RegistrySearch1" />

The setup is created successfully. now we tried to digital signature the setup executable using signtool exe from command prompt.

"C:\Program Files (x86)\Windows Kits\10\bin\10.0.22621.0\x64\signtool.exe" sign /v /s MY /n "Digital Code Signing" /tr http://timestamp.digicert.com /td sha256 /fd sha256 /a "D:\Setup\MySetup.exe"

The setup successfully digital signed.
When we run setup getting error below.

Error Screenshot

Log files
MyApplicationSetup1.0.0.0_20240916112851.log
MyApplicationSetup1.0.0.0_20240916112906.log
MyApplicationSetup1.0.0.0_20240916112910.elevated.log

Why this error thrown up for setup executable. Do we missing anything. how to resolve the issue.
When we do sign MSI its working without any issue.

[erikf-iccms]

I am not sure if this is related to your issue but it is not enough to just sign the setup executable/bundle. You also need to sign the Burn engine.
Look at the bottom of the page at this link to see how to sign a bundle correctly from either MSBuild or command line:
https://wixtoolset.org/docs/tools/signing/#signing-bundles
So try to sign both the engine and the bundle and see if it works.