Signing with SignTool

To sign a file with SignTool, use a command like this:
signtool.exe sign /f "YourCertificate" /fd sha256 /csp <csp_name> /k <key_alias_name> /t <timestamp_url> <input_file_path>
  • /f "YourCertificate": Path to your code-signing certificate.
  • /fd sha256: Specifies the hashing algorithm (SHA-256 is recommended).
  • /csp <csp_name>: Replace <csp_name> with the name of your cryptographic service provider (CSP).
  • /k <key_alias_name>: Replace <key_alias_name> with the alias name of your key.
  • /t <timestamp_url>: Provides a timestamp from a trusted timestamping authority.
  • <input_file_path>: Path to the file you want to sign.