Questions tagged [signtool]

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files.

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files. For information about why signing files is important, see Introduction to Code Signing. The tool is installed in the \Bin folder of the Microsoft Windows Software Development Kit (SDK) installation path.

SignTool is available as part of the Windows SDK, which you can download.

342 questions
0
votes
1 answer

Time-Stamping servers API (what signtool uses)

What is the input that (code signing) time stamping servers expect? And what format is the reply? I've searched VeriSign's site (and more) but found nothing but directions to use tools like signtool. What I want is the ability to create something…
ispiro
  • 26,556
  • 38
  • 136
  • 291
0
votes
1 answer

Altenative place/way to download signtool / replacement

For whatever reason, I seem unable to install this SDK https://msdn.microsoft.com/en-us/windows/desktop/bg162891.aspx But I need a new signtool.exe for signing my downloads with sha256 certificate. Is there any semi-official place I can download…
Tom
  • 3,587
  • 9
  • 69
  • 124
0
votes
0 answers

Trouble digital signing a driver on Windows 8/10

My company sells a device that uses the 'usbser.sys' driver. Up to Windows 7 we provided unsigned INF file, starting from Windows 8 we bought a DigiCert certificate to sign the driver. Trouble 1: on Windows 8 the driver is installed and works fine,…
user4763353
0
votes
1 answer

How to sign windows executables without having access to the certificate itself?

I am looking for a solution that would allow me to sign windows executables without having access to the certificates from the build machine. Imagine that you are building a branded version of your software and you must sign the code with a…
sorin
  • 161,544
  • 178
  • 535
  • 806
0
votes
1 answer

Windows signtool.exe sign command /s option

When using the signtool to digitally sign a catalog file (*.cat), what does the /s option actually do? Example: signtool sign /s SomeStore c:/someCAT.cat What does the SomeStore parameter for the /s option do? How does one confirm that this…
HighExodus
  • 104
  • 2
  • 11
0
votes
1 answer

How to sign code .sys driver with signtool?

Reading the documentation to sign my .SYS file I got this instruction: signtool.exe sign /v /ac "AddTrustExternalCARoot_kmod.crt" /f my.pfx /p password /tr http://timestamp.comodoca.com/rfc3161 "C:\myfile.sys" Any idea what…
yarek
  • 11,278
  • 30
  • 120
  • 219
0
votes
1 answer

Does SignTool produce certificates using X509?

Does SignTool use X.509? Could I extract and verify a digital signature from SignTool using the X509 functions in C#?
MKII
  • 892
  • 11
  • 36
0
votes
1 answer

Do I need to sign child processes?

We are altering the structure of our Windows c#.net 4 application to being multiprocess. The UI is in the main exe, and that spawns child exe processes to do tasks. We use a digital signature (ie. with Signtool.exe) to sign the UI exe. For windows…
Sugrue
  • 3,629
  • 5
  • 35
  • 53
0
votes
0 answers

How can I programmatically read the file signcode signing time?

How to get a digital signcode signing time from an exe file in Delphi / winapi code?
ar099968
  • 6,963
  • 12
  • 64
  • 127
0
votes
1 answer

Importing .pfx certificate and signing binaries

In our build procedure, we are using .pfx file to sign our generated binaries, while referencing the time stamp server. Is it possible to import/install this into the build machine (Windows Server 8.x) and sign our binaries, instead of manually…
Farrukh Waheed
  • 2,163
  • 2
  • 29
  • 59
0
votes
1 answer

SignTool Error --> I cannot create a package for my application and only this app

1> IPC-ACE -> C:\Users\Samer.Chemaly\Documents\Visual Studio 2012\Projects\IPC-ACE-1\IPC-ACE\bin\x86\Release\IPC-ACE.exe 1>MakePRI : warning 0xdef00520: Invalid qualifier: 12-SEC 1> IPC-ACE ->…
Sam
  • 355
  • 1
  • 4
  • 16
0
votes
1 answer

Software Publisher Certificates and Strong Name Keys are they related?

Should a Software Publisher Certificate granted by a third-part Certification Authority be used to generate a Strong Name Key for use with .NET assemblies? Edit: Another way of stating the question is whether code-signing and strong name keys have…
Doug Ferguson
  • 2,538
  • 2
  • 16
  • 23
0
votes
1 answer

"Format is not recognized" error while trying to sign xap-file with signtool

I am trying to follow this tutotial: http://channel9.msdn.com/learn/courses/Silverlight4/Overview/Overview/Moving-Beyond-the-Browser--Elevated-Trust-Applications/#_Toc256192962 in order to sign my silverlight application. But on the last step…
0
votes
2 answers

Clickonce publishing from Visual Studio 2013 command-line with MSBuild cannot find SignTool.exe

I have a build-script which I've been using for ages now, and worked fine in all previous VS versions up to 2012. After migrating to 2013 the build script fails to sign the ClickOnce manifest at the end of the build process, and complains about not…
Zoltán Tamási
  • 12,249
  • 8
  • 65
  • 93
0
votes
0 answers

msbuild task in NAnt does not compile WiX project in Postbuild

This WiX Setup project compiles in Visual Studio without a problem. However, running it in NAnt using the msbuild task shows the following error. msbuild task:
Ranjith Venkatesh
  • 1,322
  • 3
  • 20
  • 57
1 2 3
22
23