title: Manual update for signed ClickOnce app throws TrustNotGrantedException
body: <p>I have a ClickOnce deployment which is signed by a certificate obtained from Symantec. The security warning prompt after starting the setup shows the publishers name. So it's trusted. But when calling </p>
  
  <pre><code>ApplicationDeployment.CurrentDeployment.CheckForDetailedUpdate()
  </code></pre>
  
  <p>I get the TrustNotGrantedException - User has refused to grant required permissions to the application.</p>
  
  <p>If I add my certificate to the Trusted Publishers Store on my machine the exception is not thrown and the CA of Symantec is also added to the store. But obviously I can't add the certificate to the Trusted Publishers Store of our clients who use the app.</p>
  
  <p>The app is first installed from disc and at every start it checks an online update url. 
  And if I remove the certificates from the Trusted Publishers Store afterwards the manual update still works if I try it again. Are these information also stored elsewhere?</p>
  
  <p>If I don't sign the published ClickOnce app the manual update works.
  If I sign the published ClickOnce app with a self signed certificate made with makecert the manual update works.
  So there's probably an issue with the certificate?</p>
  
  <p>How can I determine if there's a certificate issue and which steps should I do next? </p>