Signing with signcode (.pvk and .spc files)

In order to sign Microsoft .CAB .EXE .DLL component, use the method discribed here under. You''l need the former Microsoft SDK.

c:\inetsdk\bin>signcode -v c:\mykey.pvk -spc c:\p7-0000000000-0000.spc c:\signfiles\le_fichier_a_signer -t http://timestamp.verisign.com/scripts/timstamp.dll

We advise you to systematically use the timestamping with your Authenticode signatures.

To do so, add the following elements on the signcode command line:

-t http://timestamp.verisign.com/scripts/timstamp.dll

To check a signature:

c:\inetsdk\bin>chktrust c:\signfiles\the_file_to_sign

You can also find a graphic version of the signcode tool. Its functioning is similar.

See Microsoft official documentation

External links

• When to trust a software editor
• Microsoft TechNet: Authenticode
• MSDN: How : signing a Visual Basic Visual C# (smart devices) application