Before you start

verify your environment meets these requirements supported hardware {{ch}} , 7 0 2 x or later supported operating systems windows 10 or later required access an account on the {{ch}} with administrator permissions to deploy new services local administrator access on the computer where microsoft signtool is installed network and firewall allow outbound tcp port 2001 (default host api port) from the computer running microsoft signtool to the {{ch}} , specified by fqdn (for example, cryptohub example com ) or cidr (for example, 10 0 0 0/24 ) tls inspection or ssl proxies can break mutual tls handshakes exempt the {{ch}} fqdn(s) from inspection configure the {{ch}} with a fqdn so the exemption applies other microsoft signtool signtool is available as part of the windows sdk, which you can download from https //developer microsoft com/windows/downloads/windows 10 sdk/ https //developer microsoft com/windows/downloads/windows 10 sdk/)