How to code sign with new EV usb tokem?

[torrid]

I just got one and it requires Safenet Auth to access drive.
You cannot copy it and it is not a pfx file.

I have a microsoft signtool command I can run to sign but wondering if I can
get SB to use this so I don't have to manually do it on every build.

I did search the forums and did not find anything other than your announcement
about getting EV certs through you at a discount.

Regards,
-Tim

[linder]

Tim,

a "macro" (EVCS = Extended Validation Code Signing) can be used in the "PFX File" entry field (Options -> Code Signing tab).

For example: EVCS://subject name

where subject name is the text listed under the "Issued to" field in Personal/Certificates. The compiler will then select the EV code-signing certificate.

Leave the password blank because SafeNet handles it.

IIRC, you have to do the following to configure the SafeNet thing:

1. Open SafeNet Authentication Client Tools.
Navigate to Start > Program Files > Safenet > Safenet Authentication Client Tools.
2. Click the Advanced View icon (gold gear).
3. In the menu tree in the left pane, select Client Settings.
4. In the right pane, select the Advanced tab.
5. On the Advanced tab, select the Enable single logon option.
6. Click Save.
7. To activate the single logon feature, log off from the computer and log on again.

Does this help?

Friedrich

[torrid]

Friedrich,
No can't get it to work.
I get GEN1053: Code signing process failed. Error Code: 1

The PFX File field is set to: EVCS://Torrid Technologies, Inc.
and that's the exact Issued to: text in the certificate.
Safenet is indeed running and the certificate is listed on the SafeNet Client tools screen with that same text.

I had gone through the 1-7 steps. I have Enable single logon checked.
Do I also need to check Enable single logon for PKCS#11 ???

Not sure what else to try. I can sign the installer exe from the terminal command line as my backup but would be nice not to have to do that step.

-Tim

[linder]

Hi Tim,

what command line arguments are you using? And did you leave the password field in SB blank?

Friedrich

[torrid]

Hi,
I dont think I am using any command line arguments. Your instructions did not mention that... or maybe I missed it.

And YES left the password field blank.

Was going to show screenshot but pasting in here does not work and the image icon lets me select file from computer but
then there is no button to OK and paste it in.

-Tim

[linder]

Hi Tim,

sorry for the confusion. You mentioned you can sign the installer exe from the terminal command line. What command line arguments are you using?

BTW, it's not a good idea to manually code-sign your installer because you'll miss the uninstaller signing.

Friedrich

P.S. Uploading screenshots here works without any problem.

[torrid]

Friedrich,
Sorry I never saw your response from last year.
Now tackling same issue this year.
If I run this in cmd terminal, it does pop up asking password and succeeds:

"C:\Program Files\Microsoft SDKs\Windows\v7.0\Bin\signtool" sign /tr http://timestamp.sectigo.com /td sha256 /fd sha256 /n "Torrid Technologies, Inc." /a "E:\TorridDataDrive\__PLANCUR\Xojo\RetirementView. exe"

I have attached screenshot of the SB10 digital signature settings as well as a screenshot of the failed output.

[torrid]

Anything to try to solve this?

[torrid]

@Friedrich any additional thoughts on this???

[pproducts2]

Hi

I just got a new code sign certificate and having the exact same issue.
Is there a step by step guide on the instructions on how to install it and then use it in setupbuilder.

Thanks
Greg