Code Signing Help

• Windows Code Signing
• Create CSR
• Install Certificate and Sign Code
• Java Code Signing
• Create CSR
• Install Certificate and Sign Code

---

Microsoft Windows Code Signing

Download the Digital Certificate From Control Center

You will receive an email from VikingCloud™ with a zip file attached to the email. The filename will be similar to YourCompanyName.zip. Copy this file to your code signing computer and extract the YourCompanyName.p7b file from it.

1. Launch the Microsoft Management Console application (search for "mmc" in the Windows search feature)
2. From the File menu, select Add/Remove Snap-in...
3. Select Certificates in the Available snap-ins table on the left and click the Add > button
4. Select My User Account in the radio list and click Next.
5. Click Finish.
6. Click OK.
7. Click on Certificates - Current User in the left panel.
8. Right click on Personal in the center panel and select All Tasks -> Import...
9. Click Next.
10. Browse to the downloaded YourCompanyName.p7b file and click Open. Then click Next.
11. Click Next.
12. Click Finish.

Best practices for code signing

The most important thing for you to do when signing your code is to use the VikingCloud timestamping service (http://timestamp.ssl.vikingcloud.com) to place a timestamp on the certificate signature. The use of a timestamp from VikingCloud when signing your code with the VikingCloud certificate will allow your code to continue to be trusted after that certificate expires.

Signing code with your new certificate

Once you have obtained the certificate, to sign a Windows binary with a certificate provided in CER form (with separate RSA private key) you will need the signtool tool from Microsoft (part of the Windows SDK.)

To sign code:

signtool.exe sign /tr http://timestamp.ssl.vikingcloud.com /td SHA256 /fd SHA256 binary_to_sign.exe

If you signed an exe you can run it at this time to see the new signature. 

Click the publisher link to see more details.