How to code sign with new EV usb tokem?

[pproducts2]

Hi

I got it running by using safenet to install the certificate to the local user.
I originally installed it to local machine.

All works fine now using the global sha-1 only setting in the setupbuilder global options.

Greg

[torrid]

Good for you Greg. Thanks for circling back.
Long story but I had safenet working and unlocked the cert but now can't get safenet to work.
Told to uninstall and reinstall and it no longer works. Sectigo cust support tried a couple of calls
and then ended with can't help me due to "problem with my computer". So it's fun.
If issue is that I need to install cert for local user and I did not then I am stuck.
Any idea how to check that?
-Tim

[pproducts2]

I tried it again today and it is no longer working and I have no idea why.
This needs to be fixed or we need some clear instructions on how to get it to work.

[pproducts2]

I have not been able to get hold of anyone from setupbuilder support but here is what I have found out.
You have to put in your password the first time you sign a file after you log into your computer. It does not work from setupbuilder so you have to do it elsewhere.
The script you are using with signtool works ok for it.
So what I did was make a .bat file to use signtool to sign a single file and it will popup a message to enter the password.
After you enter it for the first time setupbuilder will work fine until you log out of your computer.
I called Sectigo and they confirmed I would need do it this way.
Hopefully someone from setupbuilder will fix this.

Greg