Questions tagged [signtool]

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files.

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files. For information about why signing files is important, see Introduction to Code Signing. The tool is installed in the \Bin folder of the Microsoft Windows Software Development Kit (SDK) installation path.

SignTool is available as part of the Windows SDK, which you can download.

342 questions
3
votes
1 answer

Signing exe-files under Linux

When I try to sign an EXE file under Linux with Wine, it requires some dll - mfc42.dll. Also tried install that dll with winetricks, but I cannot get it running. Maybe you know a better way to sign a .EXE under Linux?
user1991123
  • 121
  • 2
  • 7
3
votes
2 answers

SignTool Error: Access is denied

I'm trying to sign an external dll with a pfx file using SignTool with the below code in cmd.exe SignTool sign /f MyCert.pfx /p MyPassword MyControl.dll But, I keep getting the following error message. Done Adding Additional Store SignTool Error:…
Butters
  • 947
  • 5
  • 16
  • 25
3
votes
3 answers

SignTool error while packaging Windows Store app

During packaging the Windows Store application, I get an unspecified error [APPX1204]: C:\Program Files (x86)\MSBuild\Microsoft\VisualStudio\v11.0\AppxPackage\Microsoft.AppXPackage.Targets(1139,9): error APPX1204: Failed to sign…
Zacateras
  • 295
  • 5
  • 19
3
votes
2 answers

Unable to sign bootstrapper executable (setup.exe) after embeding manifest

We are using Nant to prepare setup of our software using Clickonce. Using signtool to sign dll(s) and exe(s). signtool command : signtool sign /f ${certFile} /p ${certFilePwd} {path of setup.exe} Using Mt.exe to embed manifests in exe files. Mt…
Riken
  • 31
  • 1
3
votes
0 answers

Code signing several projects in one solution in .NET

I am new to .Net and I received a task where I am supposed to sign existing WPF .net solution with a certificate. The thing is, that the solution consists of several projects from which some are installers, one is update service, there are several…
Wolf
  • 871
  • 1
  • 7
  • 21
2
votes
1 answer

signed exe coming up with publisher unknown with makecert

I am attempting, for internal use at the moment, setup a self installing exe which is signed and comes up with our company as the publisher and not "Unknown". I have executed the following steps: makecert.exe -sv Our.pfk -n "CN=Our Company"…
sldahlin
  • 685
  • 1
  • 8
  • 19
2
votes
0 answers

Does an expired timestamping certificate invalide the Code Signing?

TL;DR Question Does the expiry of the Timestamp Certificate have any bearing on the validity of the signed file (under normal Windows operation)? Preamble The basics of Code Signing and Timestamping can be found at various…
Martin Ba
  • 37,187
  • 33
  • 183
  • 337
2
votes
0 answers

What is the wrong with this sign in command? (Error: Store IsDiskFile() failed)

I want to sign in a single dll using this command. signtool sign /f $qD:\DIN\DIN_DMCC_Microsoft_PrivateKey.pfx$q /p $qD*****N DM(($q $f d:\agsXMPP.dll)) When i run that it says SignTool Error: An unexpected internal error has occurred. Error…
Prageeth Liyanage
  • 1,612
  • 2
  • 19
  • 41
2
votes
0 answers

Is there any reason to not generate page hashes for authenticode signing with signtool.exe?

According to this TechNet article on forced integrity checking, there are some circumstances where generating page hashes (the /ph option) is required. There are other circumstances mentioned where pages hashes are recommended for performance…
Matthew Pope
  • 7,212
  • 1
  • 28
  • 49
2
votes
1 answer

Outputed py2exe exe won't run only when signed: ImportError

So, I've got a program I made in python 2.6, it ran fine as normal python, and ran fine when made into an exe via py2exe v0.6.9. I used signtool to sign it, having changed nothing else, and it stops working. When I run the signed exe, I receive an…
nixjdm
  • 121
  • 1
  • 11
2
votes
1 answer

Codesign an executable and allow the modification of some bytes

I use signtool.exe to codesign a Windows executable. Which options of this tool can be used to define that a few bytes should be omitted from the hash calculation, and thus allowing that a digitally signed executable can have 8 or 16 bytes modified…
2
votes
1 answer

Signtool Unexpected token 'sign'

I went through the questions but could not find the exact same issue as what I am encountering. I installed Signtool following the instructions under Windows 11, and am trying to apply the instructions here:…
Mitch Match
  • 339
  • 4
  • 14
2
votes
0 answers

signtool /d equivalent in Powershell?

I am signing .MSI files using Powershell Set-AuthenticodeSignature cmdlet. My goal is to use this cmdlet to replace signtool. However, I am not seeing a parameter that I can specify a description to the signed content, just like the /d option in…
fhcat
  • 971
  • 2
  • 9
  • 28
2
votes
1 answer

AWS CloudHSM error on Windows Server: Certificate Request Processor: Provider type not defined. 0x80090017 (-2146893801 NTE_PROV_TYPE_NOT_DEF)

When generating a CSR on Windows Server using the AWS CloudHSM service, I obtain the following error: certreq.exe -new my-request.inf my-request.csr Certificate Request Processor: Provider type not defined. 0x80090017 (-2146893801…
2
votes
1 answer

Where is SignTool /d info (description of the signed content) used/displayed?

In the SignTool documentation it is said: /d Specifies a description of the signed content. Where can I find that description?
JConstantine
  • 1,020
  • 7
  • 19