When canceling an uninstallation of a package that installs certificates the certificates are still deleted. I expect that the rollback action should re-install the certificates if uninstallation is canceled/fails.

Looking at the code it seems that the FindExistingCertificate function in scacert.cpp is not using the suffix created when installing the certificates (_wix_certX) when comparing against the installed certificates. Therefore not finding that the certificate is installed and not scheduling a rollback custom action.

This can be tested by having the in the package (and also some certificate
<iis:Certificate Id='someId' Name='someName'
StoreName='root' StoreLocation='localMachine'
BinaryKey='someBinary
Overwrite='yes'
Request='no' /> )
and using the command line:

msiexec /lv* setup.log /x msipackage.msi WIXFAILWHENDEFERRED=1

Originally opened by henrikjohansson from http://sourceforge.net/p/wix/bugs/3273/