Code signing
Microsoft SignTool
Test Microsoft SignTool commands
4 min
this section runs the following microsoft signtool commands signtool sign and signtool verify the signtool sign command is relevant to this integration because it is the only signtool command that initiates communication with the {{ch}} signtool must be able to access the private key stored in {{ch}} to complete the code signing operation successfully sign a file the following example signs an exe file, but you can sign other types of files by using signtool see the following document for details https //docs microsoft com/en us/windows/win32/seccrypto/cryptography tools https //docs microsoft com/en us/windows/win32/seccrypto/cryptography tools perform the following steps to sign a file using the configured code signing certificate open powershell or windows command prompt and run the following command, replacing mycertificate with the subject name of your certificate and example exe with the name of the file that you are signing signtool sign /sm /fd sha256 /s my /n "mycertificate" example exe if the command succeeds, you should receive the following message done adding additional store successfully signed example exe verify the file to verify the file that was signed, run the following command signtool verify /pa example exe if the command succeeds, you should see output similar to the following example file example exe index algorithm timestamp \======================================== 0 sha1 none successfully verified example exe