Questions tagged [signtool]

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files.

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files. For information about why signing files is important, see Introduction to Code Signing. The tool is installed in the \Bin folder of the Microsoft Windows Software Development Kit (SDK) installation path.

SignTool is available as part of the Windows SDK, which you can download.

342 questions
0
votes
0 answers

Code Signing Dlls using Azure Pipelines Powershell remote execution task

I am trying to signing dlls using signtool.exe. The problem i am having is signing certificate is mapped to one AD account and had to login to any accessible machine and do the signing process. The code signing certificate is stored in local user…
Renji
  • 391
  • 2
  • 7
  • 20
0
votes
2 answers

How to sign code automatically without installing anything on any OS?

We've setup a process to manually sign our code using the SIGNTOOL from Microsoft. We generate our installation package using NSIS and it's time to start automating the code signing process as well as part of the NSIS scripts. We do not use windows…
gunslingor
  • 1,358
  • 12
  • 34
0
votes
1 answer

How do you append SHA1 signature after the SHA256 signature?

I have a .cat file that is signed by MS and I would like to append the SHA1 signature to it. However, signtool fails using /as to append the SHA1 signature. Error 0x80070057. I often sign using SHA1 first and use /as on the SHA256 signature and…
user3161924
  • 1,849
  • 18
  • 33
0
votes
0 answers

Appending multiple digest signatures to a file using signtool

I am trying to sign a .exe file using signtool's digest signing option with several signatures while appending them. For each signature I am using /dg to create the digest, then /ds to sign it and then /di to ingest it and sign the .exe file. Didn't…
Shredder
  • 1
  • 2
  • 4
0
votes
1 answer

signtool results corrupted setup.exe

I try to sign my setup.exe like this: signtool sign /a setup.exe The signing is succeeded, verified OK, but when I start the setup, it recognises that the content changed, and it sais: "The setup is corrupted...". I tried this with two different…
bsebi
  • 43
  • 1
  • 7
0
votes
1 answer

signcode: question about hash of the signing certificate and hash of the timestamp server

I'm a bit cunfused about the difference between the algorithm of the signing certificate and algorithm of the timestamp server. An example. I have signed a *.exe file with SHA256: signtool sign /f mycertificate.pfx /p mypassword /td SHA256 /fd…
ar099968
  • 6,963
  • 12
  • 64
  • 127
0
votes
1 answer

signtool.exe set proxy for timestamp

I want reach the timestamp server for sign a file with signtool.exe behind a firewall, this is my current command: signtool.exe timestamp /t http://timestamp-server foo.exe has sign tool some feature for set the proxy?
ar099968
  • 6,963
  • 12
  • 64
  • 127
0
votes
1 answer

Can I sign Hardware Lab Kit Package (HLKX) with a Self Signed Cert

To test my HSM, I created a self signed cert with its keys stored in the HSM. When I execute signtool, it find the cert and signs the binary. When I attempt to sign an Hardware Lab Kit package (HLKX file) with the cert using the store it finds no…
Eva Brigid
  • 123
  • 14
0
votes
0 answers

Build failed Issue in signtool.exe exited with code 123

I have opened my Visual Studio 2013 project in Visual Studio 2015. When I am trying to build am getting below issue: The command “C:\Program Files (x86)\Microsoft SDKs\Windows\v7.1A\Bin\signtool.exe” sign /v /tr…
Karthik
  • 197
  • 1
  • 2
  • 10
0
votes
1 answer

Teamcity - Signtool error - pfx file not found

I have the following line in the Build Script(.bat file) : SignTool.exe sign /f /p "password" /t http://timestamp.verisign.com/scripts/timestamp.dll /v It works fine in the Teamcity server if…
Marck
  • 107
  • 1
  • 10
0
votes
3 answers

Sign file MSBuild with incremental build

I am using the following to sign my output dll. The problem is that this makes signing to run every time the build is done which kills incremental build. I tried using Inputs="$(TargetPath)" Outputs="$(TargetPath)", but this doesn't run sign task at…
NN_
  • 1,593
  • 1
  • 10
  • 26
0
votes
1 answer

Signtool file size limitation?

I created a 7-zip self-extracting archive with a size of 4,37GB. When I use the signtool (tried already the 64-bit and 32-bit variant), it failed to sign this file. I got the errors: SignTool error: This file format cannot be signed because it is…
cvechelp
  • 36
  • 3
0
votes
2 answers

Unable to access key in HSM for sh256 signing but can for sha1 signing

How can I enable access to key in HSM when signing as sha256? When I sign as sha1 sign tool properly pulls the cert key out of the HSM but if I change to "/fd sha256" the key can't be found within the container. I'm sure signtool can access the…
Eva Brigid
  • 123
  • 14
0
votes
1 answer

Using SignTool for Excel add-ins

I want to use Sign Tool from Windows SDK on my Excel Add-in project. The signing works fine on the installer, but when I try on the dll-files it has no effect. I tried signing the vsto-file instead but then I get "This file format cannot be signed…
afghg
  • 33
  • 1
  • 6
0
votes
0 answers

No certificates were found that met all the given criteria when signing with sign tool

I am trying to make a dummy cert file on my local machine to test out the build script but im getting the error No certificatse were found that met all the given criteria Here are the steps I performed: Run MMC to open up Console root and went…
Steve
  • 11,696
  • 7
  • 43
  • 81