Security certificate - Forum

Forum Navigation
You need to log in to create posts and topics.

Security certificate

Hello.
I found with Windows 10 how to create a security certificate.
I created a security certificate.
I can't find how to assign this certificate to my application.
Would anyone have an idea?
Thank you for your help.

Hi @feli,

Do you mean a code signing certificate?
If so, have you already exported it from your Web Browser in .pfx format?
You will also need to install Windows SDK to get the signtool.exe application that will allow you to sign your software.

Regards

Sorry for that long delay ... lots of problems. Thank you Luis for your answer.
My certificate is in .pfx format.
I downloaded and installed windows sdk as well as visual studio but I can not find signtool.exe.

Hi @feli,

For me it is located here:

C:\Program Files (x86)\Windows Kits\10\App Certification Kit\signtool.exe

I use a VisualNEO Win program to sign my programs using a command like this one:

Run "C:\Program Files (x86)\Windows Kits\10\App Certification Kit\signtool.exe " "sign /f [#34]C:\certificates\mycertificate.pfx[#34] /t http://timestamp.comodoca.com/authenticode /p [password] [path]" "RunOnce+Wait" "" ""

If you want to use it, just change the paths to signtool.exe and yourcertificate.pfx to the appropiated ones.
Also store your code signing certificate password in [password] variable and the path to your software executable in [path] variable.

Thank you Luis. This solution does not work for me but allowed me to direct my research.
This one does the job perfectly.

SetVar "[password]" "xxxxx"
SetVar "[path1]" "C:\Users\xxxxx.pfx"
SetVar "[path2]" "C:\Users\xxxxx.exe"
Run "C:\Program Files\Windows Kits\10\App Certification Kit\signtool.exe" "sign /f [#34][path1][#34] /p [password] /t http://timestamp.verisign.com/scripts/timstamp.dll /v [#34][path2][#34]" "RunOnce+Wait" "" ""

This can help someone else...

luishp has reacted to this post.
luishp

Hi @feli,
Great!
Of course the exact procedure depends on where do you purchased your Code Signing Certificate.
Anyway if you have been successful, everything is fine :)
Thanks for sharing.