Reply to Thread

Re: How to code sign with new EV usb tokem?

I have not been able to get hold of anyone from setupbuilder support but here is what I have found out.
You have to put in your password the first time you sign a file after you log into your computer. It does not work from setupbuilder so you have to do it elsewhere.
The script you are using with signtool works ok for it.
So what I did was make a .bat file to use signtool to sign a single file and it will popup a message to enter the password.
After you enter it for the first time setupbuilder will work fine until you log out of your computer.
I called Sectigo and they confirmed I would need do it this way.
Hopefully someone from setupbuilder will fix this.

Greg

Re: How to code sign with new EV usb tokem?

I tried it again today and it is no longer working and I have no idea why.
This needs to be fixed or we need some clear instructions on how to get it to work.

Re: How to code sign with new EV usb tokem?

Good for you Greg. Thanks for circling back.
Long story but I had safenet working and unlocked the cert but now can't get safenet to work.
Told to uninstall and reinstall and it no longer works. Sectigo cust support tried a couple of calls
and then ended with can't help me due to "problem with my computer". So it's fun.
If issue is that I need to install cert for local user and I did not then I am stuck.
Any idea how to check that?
-Tim

Re: How to code sign with new EV usb tokem?

Hi

I got it running by using safenet to install the certificate to the local user.
I originally installed it to local machine.

All works fine now using the global sha-1 only setting in the setupbuilder global options.

Greg

Re: How to code sign with new EV usb tokem?

Hi

I just got a new code sign certificate and having the exact same issue.
Is there a step by step guide on the instructions on how to install it and then use it in setupbuilder.

Thanks
Greg

Re: How to code sign with new EV usb tokem?

@Friedrich any additional thoughts on this???

Re: How to code sign with new EV usb tokem?

Anything to try to solve this?

Re: How to code sign with new EV usb tokem?

Friedrich,
Sorry I never saw your response from last year.
Now tackling same issue this year.
If I run this in cmd terminal, it does pop up asking password and succeeds:

"C:\Program Files\Microsoft SDKs\Windows\v7.0\Bin\signtool" sign /tr http://timestamp.sectigo.com /td sha256 /fd sha256 /n "Torrid Technologies, Inc." /a "E:\TorridDataDrive\__PLANCUR\Xojo\RetirementView. exe"

I have attached screenshot of the SB10 digital signature settings as well as a screenshot of the failed output.

Attachment 5145
Attachment 5146

Re: How to code sign with new EV usb tokem?

Hi Tim,

sorry for the confusion. You mentioned you can sign the installer exe from the terminal command line. What command line arguments are you using?

BTW, it's not a good idea to manually code-sign your installer because you'll miss the uninstaller signing.

Friedrich

P.S. Uploading screenshots here works without any problem.

Re: How to code sign with new EV usb tokem?

Hi,
I dont think I am using any command line arguments. Your instructions did not mention that... or maybe I missed it.

And YES left the password field blank.

Was going to show screenshot but pasting in here does not work and the image icon lets me select file from computer but
then there is no button to OK and paste it in.

-Tim