75 questions
70
votes
2
answers
11k
views
The UAC prompt shows a temporary random Program Name for msi, can the correct name be displayed?
I'm building an MSI installer for windows and sign the installer using signtool. When I run the .msi to test it, the UAC (User Account Control) prompt shows up to ask me if I want to allow the ...
411
votes
24
answers
568k
views
Signtool error: No certificates were found that met all given criteria with a Windows Store App?
I'm trying to sign a Windows 8 appx package with a pfx file I have. I'm using a command like so:
signtool.exe sign /fd sha256 /f "key.pfx" "app.appx"
And from this, I get:
SignTool Error: No ...
143
votes
18
answers
265k
views
How to install SignTool.exe for Windows 10
How to install SignTool.exe in Visual Studio 2015 for Windown 10?
I tried to build my project but the program threw an error :
Error An error occurred while signing: SignTool.exe not found.
2
votes
1
answer
2k
views
Outputed py2exe exe won't run only when signed: ImportError
So, I've got a program I made in python 2.6, it ran fine as normal python, and ran fine when made into an exe via py2exe v0.6.9. I used signtool to sign it, having changed nothing else, and it stops ...
17
votes
1
answer
5k
views
How do I securely store a .pfx password to use in MSBuild?
I need to add certificate signing to my build. Below is a sample of the working script I wrote, however it includes the password to the .pfx file. I can't keep the password in the build script. What ...
4
votes
1
answer
11k
views
creating a key and signing executable with signtool
How would I sign a Visual C# executable?
SignTool.exe can't find a certificate.
How would I create a self signed key and certificate, and have signtool be able to see the certificate and use it?
...
1
vote
2
answers
1k
views
Is it useless to sign my Windows application with a self signed certificate?
I have coded an NWjs Windows application (Chromium application) and using Inno Setup, I have signed it using a self-signed certificate. However, I get the "Windows protected your PC" message when ...
22
votes
2
answers
5k
views
How do I securely configure a CI server to digitally sign binaries?
There are many sites that explain how to run signtool.exe on a .pfx certificate file, which boil down to:
signtool.exe sign /f mycert.pfx /p mypassword /t http://timestamp.server.com \
/d "My ...
13
votes
4
answers
26k
views
Why I get "The specified PFX password is not correct" when trying to sign application with signtool?
I followed this link
to sign my exe application.
I installed SDK tool on Windows 7,
run C:\Program Files\Microsoft SDKs\Windows\v6.1\Bin>makecert.exe -sv App-O.pvk -n "CN=MY DIGITAL KEY" App-O....
11
votes
1
answer
14k
views
SignTool Not Signing ClickOnce App Using SHA256, Only Uses SHA1
I'm trying to sign my clickonce app. I have an EV code signing certificate that is using SHA256. The problem is that when I sign my app using the post build commands, it seems to be using SHA1 ...
9
votes
6
answers
6k
views
Why does signtool.exe only find certificate when run as admin?
I'm setting up a new development laptop, and have installed a self-issued code signing certificate. I can see it in certmgr under my Current Users's Personal Certificates.
When I try to build from ...
7
votes
2
answers
3k
views
Using EV Certificate With ClickOnce
My company purchased an EV Certificate from Symantec to use for a software product we produce. Specifically it is called: Symantec Class 3 Extended Validation Code Signing CA – G2.
To develop and ...
4
votes
1
answer
978
views
Codesign an executable and allow the modification of some bytes
I use signtool.exe to codesign a Windows executable.
Which options of this tool can be used to define that a few bytes should be omitted from the hash calculation, and thus allowing that a digitally ...
2
votes
1
answer
2k
views
How to embed hash in exe file with signtool.exe
I am using signtool.exe to sign exe file.
I am trying to embed my exe file with the .pfx certificate along with the signed hash of exe(generated signed hash using openssl). I am able to sign only with ...
30
votes
6
answers
37k
views
Code signing with signtool fails due to private key filter
While trying to sign some installer created by the company I am working for I encountered an error, which I have not been able to solve. I am using the same certificate which has been used on another ...
16
votes
1
answer
21k
views
signtool with certificate stored in local computer
I cant get signtool to find my certificate. The pfx file works for signing, i've checked that by specifying the pfx file directly together with the password. But due to other people having access to ...
13
votes
3
answers
5k
views
Automated Code Signing - Protecting the private key
I want to automate the code signing of some ClickOnce deployment artifacts - application exe's and manifests. I am using signtool to accomplish this. In an attempt to make the private key available ...
12
votes
5
answers
12k
views
SignTool.exe Sporadically Fails with Exit Code 1
As part of our build system, we use signtool.exe with a certificate to sign our binaries once they've been built. Occasionally (it's hard to tell when it will strike), the signing fails:
error ...
11
votes
6
answers
20k
views
How to install SignTool.exe for VS 2017?
After upgrade to VS 2017 i got
"Error An error occurred while signing: SignTool.exe not found."
But only using MSbuild on the Visual Studio publish there's no problem.
I already checked folder
"C:\...
9
votes
1
answer
2k
views
Automate Extended Validation (EV) code signing with mage.exe
I try to sign a WPF ClickOnce application with EV certificate stored on a HSM from Gemalto. I have a Continuous Deployment (CD) configured and I want to sign automatically without user interaction, ...
7
votes
2
answers
14k
views
SignTool error when signing AppX file: "Error: SignerSign() failed." (-2147024693/0x800700cb)
I am creating an Appx package using makeappx.exe and then try to sign it using SignTool.exe.
The error I get from SignTool is:
"Error: SignerSign() failed." (-2147024693/0x800700cb)
The certificate ...
7
votes
1
answer
4k
views
Verify Authenticode of an exectuable with C# .NET 4.0
We deliver an executable to a client-service which starts this executable in a new process after downloading it from our servers.
The executable is signed (authenticode) with the CodeSigning-...
5
votes
1
answer
6k
views
Providing SignTool configuration in Inno Setup script
I have the following Inno Setup signing configuration:
[Setup]
SignTool=signtool $f
SignedUninstaller=yes
In Inno Setup Compiler IDE in "Tools > Configure Sign Tools..." I have:
"C:\DEVELOPMENT\...
4
votes
3
answers
6k
views
SignTool error: SignerSign() failed." (-2147024885/0x8007000b) when signing msi file
We recently purchased an EV Code Signing Certificate.
I followed instructions and I can successfully sign our built applications (exe files), our libraries (dll).
However, I can't sign our setup ...
3
votes
1
answer
18k
views
UWP - SignTool Error: No certificates were found that met all the given criteria
I'm getting this error after our company changed its AD domain.
UWP app development with VS 2019 and Windows 10 (1903)
C:\Program Files (x86)\Microsoft Visual Studio\2019\Community\MSBuild\...