Code signing

Microsoft SignTool

2min

This document shows you how to use the Futurex CNG library to configure the KMES Series 3 to use Microsoft Signtool. For other questions about the KMES Series 3 device, see the relevant administrator guide.

Microsoft SignTool uses a code signing certificate to digitally sign files, verify signatures in files, and timestamp files. By integrating with the KMES Series 3, every time you run a SignTool command, the system retrieves from the KMES the private key of the code signing certificate stored on the KMES.

Integration overview

This guide covers the following tasks:

  1. Install Futurex CNG (FXCNG).
  2. Configure KMES Series 3.
  3. Edit the Futurex CNG (FXCNG) configuration file.
  4. Import certificates into the Windows certificate store.
  5. Associate a private key with a certificate.
  6. Test Microsoft SignTool commands.

The following sections show you how to perform these tasks.