How to sign CAB file using signtool.exe?

Question

I have 3 files
mycert.cer
mycert.pvk
mycert.spc

Could someone please explain me - what this files should I use for?

I need to sign Test.cab file using signtool.exe from command line. But I do not understand - how to do it.
Manual http://msdn.microsoft.com/en-us/library/8s9b9yaz(VS.80).aspx is not very good :(

Thank you in advance.

AndiDog · Accepted Answer · 2010-02-02T16:33:46.777

2

The Microsoft Support Page explains exactly what you're trying to do. It is an outdated tutorial on "signcode.exe" which is similar but not equal to "signtool.exe".

If you want a simple solution, you may want to try signtool's wizard mode (execute signtool signwizard), e.g. explained here. But if command line execution is needed, check out the examples on Microsoft's support page.

edited Feb 02 '10 at 16:33

answered Feb 02 '10 at 14:21

AndiDog

68,631
21
159
205

1

There is very bad explanation on this support page. There is no good examples of usage of signtool.exe. PS. I am not .Net developer. – Volodymyr Bezuglyy Feb 02 '10 at 14:27
I don't see what you mean. The link I posted explains how to sign a CAB file using the command line tool "signcode.exe" (which is now called "signtool.exe"). So what exactly is your problem with it? – AndiDog Feb 02 '10 at 14:55
2

Do they use exactly the same parameters? – Volodymyr Bezuglyy Feb 02 '10 at 15:17
Thank you very much! I will try these examples. – Volodymyr Bezuglyy Feb 02 '10 at 17:05
2

The parameter signtool signwizard is no longer supported in the windows sdk 7.0 – Alexander Zwitbaum May 11 '10 at 11:37
2

@Shurup: They don't seem to support the signing GUI wizard anymore. https://connect.microsoft.com/VisualStudio/feedback/details/535430/signtool-error-invalid-command-signwizard – AndiDog May 11 '10 at 13:52

NoWar · Answer 2 · 2016-05-23T14:06:58.423

I just spend about 1 hour to get working this stuff. So I did it without certificate's password.

Just to simplify all commands use following steps

Use this folder C:\Program Files\Microsoft SDKs\Windows\v7.0\Bin
Copy to this folder your MyApp.cab file.
Create 2 files using this command without password as I did. Ignore to input password in popup that appears.

makecert -r -pe -n "CN=yourcompanyaddress.com" -b 01/01/2016 -e 01/01/2030 -sky exchange companyCert.cer -sv companyPvk.pvk

After this execute another command to create PFX file

pvk2pfx.exe -pvk companyPvk.pvk -spc companyCert.cer -pfx companyPfx.pfx

So now you see in this folder companyPfx.pfx

And finally sign your CAB file like this using PFX file

SignTool sign /f companyPfx.pfx MyApp.cab

Open properties of this file and you should see that it is signed already.

I hope it will be useful.

How can I add publisher to `ActiveXControl`? After signing cab file of my ActiveX control, IE not prompts user for installation. It asks for admin permission, I click yes. But setup is still not installed after that. Is it due to `Unknown Publisher`? Can you please guide me on this? — Zeeshan, Aug 04 '16 at 12:54

score 0 · Answer 3 · answered Sep 19 '14 at 05:26

0

Check this Steps to sign a file using Signtool.exe http://blogs.msdn.com/b/winsdk/archive/2009/11/13/steps-to-sign-a-file-using-signtool-exe.aspx

answered Sep 19 '14 at 05:26

PSR

875
2
13
37

How to sign CAB file using signtool.exe?

3 Answers3