code signing not quite

First I downloaded the microsoft sdk, which gave me signtool. However
the download was for windows 7. I am using windows 10. So is this
okay.

I have received my code signing certificate.

I exported the pfx file from internet explorer. I tried to follow the
directions. The pfx file has been exported. However I did not get a
prompt to enter the password for the cryptoapi private code. I think
this is the password I entered when ordering the certificate.

So when I download the exe it states unknown publisher. So something is
wrong. No error messages on the compile. For my last certificate I had
a spc file and a pvk file. I dont' seem to have those now.


Any ideas Gary

Hi Gary,

> First I downloaded the microsoft sdk, which gave me signtool. However
> the download was for windows 7. I am using windows 10. So is this
> okay.

For SHA2 or dual code signing you need the SDK for Windows 10 or at
least 8.1 to get SHA1/dual capable Signtool.exe.

Best regards,

--
Arnor Baldvinsson
Icetips Alta LLC

> For my last certificate I had
>a spc file and a pvk file. I dont' seem to have those now.

When using your .PFX file you no longer use the .spc and .pvk files.

John Griffiths

Gary,

> First I downloaded the microsoft sdk, which gave me signtool. However
> the download was for windows 7. I am using windows 10. So is this
> okay.

You can download SignTool V10 from within the IDE:

'Help' | 'Get Microsoft SignTool'

Friedrich

Gary,

> I exported the pfx file from internet explorer. I tried to follow the
> directions. The pfx file has been exported. However I did not get a
> prompt to enter the password for the cryptoapi private code. I think
> this is the password I entered when ordering the certificate.

When using a .PFX there is no prompt for a password protected certificate.

> So when I download the exe it states unknown publisher. So something is
> wrong. No error messages on the compile. For my last certificate I had
> a spc file and a pvk file. I dont' seem to have those now.

Make sure you have enabled code-signing for your setup.exe. See attached
screenshots.

1. You can configure your code-signing certificate in 'Tools' | 'Options' ->
Code-Signing tab

2. In your .sbp project, enable General Information -> Digital Signature

The compiler window will report the code-signing status.

Friedrich