Jenkins fails in signtool.exe

Question

I am using signtool.exe to sing my msi output through a proj file in Jenkins. My command to sign the msi is, "C:\Program Files\Microsoft SDKs\Windows\v6.1\Bin\signtool.exe" sign /f "C:\Build\SignCertificate.cer" /csp "Microsoft Enhanced Cryptographic Provider v1.0" /k privatekeycontainer /t "http://timestamp.verisign.com/scripts/timstamp.dll" "..\Release\output.msi" . The pfx file is added in certificate store.

Whenever i execute it through command prompt it get pass and the msi get signed. But if i try through Jenkins then it fails. Please help me what is wrong.

@SoftwareCarpenter Getting error message"error MSB:3073.... exited with code 1" from msbuild. — кคгtђเςк ĞŔĶ, Apr 23 '13 at 09:00

score 1 · Accepted Answer · answered Apr 24 '13 at 09:47

1

My problem was solved. The pfx is not imported with the private key properly. Now the leaf tells that it has a private key. So the problem is with the pfx file.

answered Apr 24 '13 at 09:47

кคгtђเςк ĞŔĶ

213
4
16

score 1 · Answer 2 · answered Jul 16 '14 at 16:19

1

Import sertificate to Machine Store instead of User store. Steps described here http://www.dartmouth.edu/~deploypki/materials/web_authn/pages/IISonXP_AddingTrustedCACertToComputer.htm

answered Jul 16 '14 at 16:19

Rytis I

1,105
8
19

score 0 · Answer 3 · edited May 23 '17 at 12:00

0

Try these steps:

Create a user 'Jenkins' as and Administrators group member
Run the Jenkins service as the user 'Jenkins'
log in as Jenkins user and install the certificate in the user store.
Run it through Jenkins

Also, take a look at this link which is very similar to your question: SignTool Error: ISignedCode::Sign returned error: 0x80092006

edited May 23 '17 at 12:00

Community

1
1

answered Apr 22 '13 at 14:50

SoftwareCarpenter

3,835
3
25
37

Currently my user is in Administrator group only. But Jenkins service is run as local user. – кคгtђเςк ĞŔĶ Apr 23 '13 at 11:21
That error message indicates a permission issue. Elevate the Jenkins service account by creating the Jenkins admin user. Also, ensure that the Jenkins service user installs the certificate so that it will be able to find it. https://wiki.jenkins-ci.org/display/JENKINS/Installing+Jenkins+as+a+Windows+service hope this helps. – SoftwareCarpenter Apr 23 '13 at 16:53

Jenkins fails in signtool.exe

3 Answers3