https://www.ascertia.com/helpdesk/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=14
How to sign .EXE, .DLL and .CAB files? | |
Product Versions | Certificate Centre |
Operating System | Microsoft Windows |
Creation Date | 2009-03-16 |
Revised Date | - |
Description |
To sign a DLL, CAB or EXE file, use the SIGNTOOL.EXE utility included in the platform SDK for Microsoft Windows 2000/XP/2003 (if required download from here). SignTool requires the CAPICOM 2.0 redistributable is installed on the local computer. The CAPICOM 2.0 redistributable is available here. You will also need a digital code signing certificate from Ascertia. If you are required web browser rooted / OS trusted certificates then we are recommending first try with our free trial or Low Cost digital certificate and only purchase from commercial certification authorities (like VeriSign, Thawte, Globalsign, etc..) once successfully tested. Signtool.exe is located in Bin directory of Platform SDK e.g. C:\Program Files\Microsoft Platform SDK\Bin.
Ascertia Root CA 2 from: http://www.ascertia.com/onlineCA/CA/AscertiaRootCA2.crt Ascertia Public CA 1 from: http://www.ascertia.com/onlineCA/CA/AscertiaPublicCA1.crt Sign your File: The following steps walk through the signing process:
Note: Please note it that, currently this TSA is not supporting timestamps to code signing certificates; TSA for code signing will be activated soon. You can use TSA server of your choice.
Test Your Signature The Platform SDK SIGNTOOL.EXE utility contains a command to check a digital signature before distributing your file.
|