<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 24/09/2024 12:15, Bo Berglund via
lazarus wrote:<br>
</div>
<blockquote type="cite"
cite="mid:ha45fj9dq3mr7qn1mq3kblest3k41gj87b@4ax.com"><span
style="white-space: pre-wrap">
</span>
<pre class="moz-quote-pre" wrap="">OK, thanks.
I downloaded the Windows SDK installer and when I ran it I got to a selection
page where I could select to ONLY install the signing tool.
The InnoSetup6 install builder does have support for signing so I will go there
for further research.
</pre>
</blockquote>
<br>
Well, do you have a certificate?<br>
<br>
This is the command I use<br>
signtool.exe sign /tr <a class="moz-txt-link-freetext" href="http://timestamp.digicert.com">http://timestamp.digicert.com</a> /td sha256
/fd sha256 /a C:\path\to\target.exe<br>
The params are explained on
<a class="moz-txt-link-freetext" href="https://learn.microsoft.com/en-us/dotnet/framework/tools/signtool-exe">https://learn.microsoft.com/en-us/dotnet/framework/tools/signtool-exe</a><br>
<br>
The /tr .... /td... is optional, but recommended. And there is a
list of time servers that can be used<br>
<br>
If you have more than one certificate (added to the windows
certificate store), then you may need to add something to select the
one you want....<br>
<br>
<br>
Usually, if you buy a cert, you get a piece of hardware (e.g. usb
dongle) and instructions which extra software to use to add the cert
from that hardware to the cert store. (and it will only work while
the dongle is plugged in).<br>
<br>
If you want to use a self issued cert, you need to find a tutorial
on that => but windows will not trust self signed certs... (Well
the user may or may not be able to add your cert to their trusted
cert list, but I have no idea ...)<br>
</body>
</html>