+ Reply to Thread
Page 1 of 2 12 LastLast
Results 1 to 10 of 15

Thread: How to code sign with new EV usb tokem?

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Join Date
    Jan 2006
    Location
    Georgia, USA
    Posts
    63

    Default How to code sign with new EV usb tokem?

    I just got one and it requires Safenet Auth to access drive.
    You cannot copy it and it is not a pfx file.

    I have a microsoft signtool command I can run to sign but wondering if I can
    get SB to use this so I don't have to manually do it on every build.

    I did search the forums and did not find anything other than your announcement
    about getting EV certs through you at a discount.

    Regards,
    -Tim

  2. #2
    Join Date
    Mar 2004
    Posts
    4,308

    Default Re: How to code sign with new EV usb tokem?

    Tim,

    a "macro" (EVCS = Extended Validation Code Signing) can be used in the "PFX File" entry field (Options -> Code Signing tab).

    For example: EVCS://subject name

    where subject name is the text listed under the "Issued to" field in Personal/Certificates. The compiler will then select the EV code-signing certificate.

    Leave the password blank because SafeNet handles it.

    IIRC, you have to do the following to configure the SafeNet thing:

    1. Open SafeNet Authentication Client Tools.
    Navigate to Start > Program Files > Safenet > Safenet Authentication Client Tools.
    2. Click the Advanced View icon (gold gear).
    3. In the menu tree in the left pane, select Client Settings.
    4. In the right pane, select the Advanced tab.
    5. On the Advanced tab, select the Enable single logon option.
    6. Click Save.
    7. To activate the single logon feature, log off from the computer and log on again.

    Does this help?

    Friedrich

  3. #3
    Join Date
    Jan 2006
    Location
    Georgia, USA
    Posts
    63

    Default Re: How to code sign with new EV usb tokem?

    Friedrich,
    No can't get it to work.
    I get GEN1053: Code signing process failed. Error Code: 1

    The PFX File field is set to: EVCS://Torrid Technologies, Inc.
    and that's the exact Issued to: text in the certificate.
    Safenet is indeed running and the certificate is listed on the SafeNet Client tools screen with that same text.

    I had gone through the 1-7 steps. I have Enable single logon checked.
    Do I also need to check Enable single logon for PKCS#11 ???

    Not sure what else to try. I can sign the installer exe from the terminal command line as my backup but would be nice not to have to do that step.

    -Tim

  4. #4
    Join Date
    Mar 2004
    Posts
    4,308

    Default Re: How to code sign with new EV usb tokem?

    Hi Tim,

    what command line arguments are you using? And did you leave the password field in SB blank?

    Friedrich

  5. #5
    Join Date
    Jan 2006
    Location
    Georgia, USA
    Posts
    63

    Default Re: How to code sign with new EV usb tokem?

    Hi,
    I dont think I am using any command line arguments. Your instructions did not mention that... or maybe I missed it.

    And YES left the password field blank.

    Was going to show screenshot but pasting in here does not work and the image icon lets me select file from computer but
    then there is no button to OK and paste it in.

    -Tim

  6. #6
    Join Date
    Mar 2004
    Posts
    4,308

    Default Re: How to code sign with new EV usb tokem?

    Hi Tim,

    sorry for the confusion. You mentioned you can sign the installer exe from the terminal command line. What command line arguments are you using?

    BTW, it's not a good idea to manually code-sign your installer because you'll miss the uninstaller signing.

    Friedrich

    P.S. Uploading screenshots here works without any problem.

  7. #7
    Join Date
    Jan 2006
    Location
    Georgia, USA
    Posts
    63

    Default Re: How to code sign with new EV usb tokem?

    Friedrich,
    Sorry I never saw your response from last year.
    Now tackling same issue this year.
    If I run this in cmd terminal, it does pop up asking password and succeeds:

    "C:\Program Files\Microsoft SDKs\Windows\v7.0\Bin\signtool" sign /tr http://timestamp.sectigo.com /td sha256 /fd sha256 /n "Torrid Technologies, Inc." /a "E:\TorridDataDrive\__PLANCUR\Xojo\RetirementView. exe"

    I have attached screenshot of the SB10 digital signature settings as well as a screenshot of the failed output.

    Name:  2024 SetupBuilder DigitalSignatureSettings.jpg
Views: 115
Size:  51.9 KB
    Name:  2024 SetupBuilder signtool fails.jpg
Views: 131
Size:  190.3 KB
    Last edited by torrid; 01-22-2024 at 06:19 PM. Reason: Wanted to subscribe to instant email notifications

  8. #8
    Join Date
    Jan 2006
    Location
    Georgia, USA
    Posts
    63

    Default Re: How to code sign with new EV usb tokem?

    Anything to try to solve this?

  9. #9
    Join Date
    Jan 2006
    Location
    Georgia, USA
    Posts
    63

    Default Re: How to code sign with new EV usb tokem?

    @Friedrich any additional thoughts on this???

  10. #10

    Default Re: How to code sign with new EV usb tokem?

    Hi

    I just got a new code sign certificate and having the exact same issue.
    Is there a step by step guide on the instructions on how to install it and then use it in setupbuilder.

    Thanks
    Greg

+ Reply to Thread

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts
  •