Questions tagged [signtool]

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files.

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files. For information about why signing files is important, see Introduction to Code Signing. The tool is installed in the \Bin folder of the Microsoft Windows Software Development Kit (SDK) installation path.

SignTool is available as part of the Windows SDK, which you can download.

342 questions
6
votes
1 answer

MSBuild SignFile task returning MSB3481: The signing certificate could not be located

I recently got a new code signing certificate. I'm using MSBuild's SignFile task to sign an application manifest. For some reason the task is returning: MSB3481: The signing certificate could not be located. Ensure that it is in the current user's…
DavGarcia
  • 18,540
  • 14
  • 58
  • 96
5
votes
3 answers

signtool fails to sign a binary with a key from a AWS CloudHSM

We are going to use AWS CloudHSM service to keep all code signing certificates secure and perform code signing on our build server. Our build server is Windows Server 2010, so I installed AWS CloudHSM client there. I activated cluster and all…
toohtik
  • 1,892
  • 11
  • 27
5
votes
4 answers

How to get path to signtool.exe with Visual Studio 2017 installed

I've taken on project based on Visual Studio 2012. There the path to signtool.exe is found the following way:
Action Heinz
  • 722
  • 10
  • 23
5
votes
1 answer

WinVerifyTrust function takes long time to excecute

I am using windows WinVerifyTrust function on windows 10 pro, to verify dll signatures. when I activate this function for the first time, it takes 4 seconds for the function to execute and return verification status for the first dll. for the other…
N.avraham
  • 333
  • 2
  • 15
5
votes
2 answers

Signing a ClickOnce application with an AfterCompile target

I've been trying to wrap my mind around Authenticode certificates for a week now. I purchased a CSC from Comodo and I've got a ClickOnce application I'd like to sign so that the SmartScreen Filter warnings go away. My application assembly is…
soapergem
  • 9,263
  • 18
  • 96
  • 152
5
votes
1 answer

How to setup signtool with SHA256 on Windows 7?

I have been using SHA1 signing for many years, but from 2016, Windows is forcing developers to use SHA256. Windows Enforcement of Authenticode Code Signing and Timestamping By using Windows 7 SDK signtool the functions to sign SHA-256 is "unknown…
Frank Jelstrup
  • 301
  • 2
  • 10
5
votes
2 answers

Signing a DLL file after it's already signed?

Can I safely sign a DLL file with a new certificate (using Microsoft's SignTool) if the DLL is already signed without recompiling it? Everything looks kosher after I do this, but I want to be 100% sure.
zig
  • 4,524
  • 1
  • 24
  • 68
5
votes
1 answer

Why does signtool in command-prompt return "Windows cannot find 'signtool'. Make sure you typed the name correctly..."

I do have that file. (In "...\Program Files\Microsoft SDKs..."). And I went to installed-programs (in Control Panel) and "reinstalled" it. So why doesn't the command prompt recognize it?
ispiro
  • 26,556
  • 38
  • 136
  • 291
4
votes
1 answer

PVK2PFX Error 0x80070490 - Cannot find certificates that match the key

We got our new certificate (*.cer) file from Thawte, and i went through our standard procedures to allow it for use with code signing. If i use our old (working) certificate: Convert certificate (.cer) into Software Publishing Certificate…
Ian Boyd
  • 246,734
  • 253
  • 869
  • 1,219
4
votes
1 answer

SignTool sporadically reports EXEC This file format cannot be signed because it is not recognized

I'm using the signtool utility to sign the MSI and EXE files on Teamcity as the part of Continuous Integration process. Most of the time it works as expected but sometimes builds fail with the error message below. [09:04:00][Exec]…
Alexey Andrushkevich
  • 5,992
  • 2
  • 34
  • 49
4
votes
2 answers

Can exe file Install pfx file in Windows Certificate Store With Python

I use Self Code sign Certificate and sign exe file using Windows SDK signtool.exe through PowerShell. Exe file successfully signed. But for other systems This Sign Doesn't work. Because other system Doesn't have my Code Sign Certificate in form of…
4
votes
1 answer

Providing SignTool configuration in Inno Setup script

I have the following Inno Setup signing configuration: [Setup] SignTool=signtool $f SignedUninstaller=yes In Inno Setup Compiler IDE in "Tools > Configure Sign Tools..." I have: "C:\DEVELOPMENT\Setup\signtool.exe" sign /f…
Bazzy
  • 43
  • 1
  • 4
4
votes
2 answers

Signtool: Since Windows 10 Update 1803: No certificates were found that met all the given criteria

I'm using signtool to sign my c# assemblies. Everything worked fine until Windows 10 1803 Update. Now as soon as a restart the Computer or even after suspending the Computer I get the error: No certificates were found that met all the given…
Markus
  • 2,184
  • 2
  • 22
  • 32
4
votes
1 answer

How to renew a code signing certificate

I have a code signing certificate from Thawte that is about to expire in a couple of weeks. I have paid for a renewal, and i have received a renewal .cer file. I have successfully created an updated .pfx file that allows me to sign Firefox addons,…
Xanderous
  • 41
  • 3
4
votes
1 answer

creating a key and signing executable with signtool

How would I sign a Visual C# executable? SignTool.exe can't find a certificate. How would I create a self signed key and certificate, and have signtool be able to see the certificate and use it? OpenSSL and Visual Studio 2010 Express are installed.…
Kevin
  • 43
  • 1
  • 1
  • 4