I have just purchased a new OV Certificate from Sectigo via KSoftware, previously this was provided as a download to my browser that I then exported as pfx file and signed with the ksign tool from KSoftware.

e.g

c:\Apps\kSign\ksigncmd /d "SongKong Installer" /du "; /f c:\code\jthink\songkong\config\comodo.pfx /p cherry1 SongKong-11.4.exe

Now, new stricter requirements mean that instead I am sent a usb stick in the post and a password by email. Then I have to install and use SafeNet Authentication Client and enter password to access the certificate.

I can now see the certificate within SafeNet Authentication Client but how do I actually use it to sign my application?

I have just purchased a new OV Certificate from Sectigo via KSoftware, previously this was provided as a download to my browser that I then exported as pfx file and signed with the ksign tool from KSoftware.

e.g

c:\Apps\kSign\ksigncmd /d "SongKong Installer" /du "http://jthink/songkong" /f c:\code\jthink\songkong\config\comodo.pfx /p cherry1 SongKong-11.4.exe

Now, new stricter requirements mean that instead I am sent a usb stick in the post and a password by email. Then I have to install and use SafeNet Authentication Client and enter password to access the certificate.

I can now see the certificate within SafeNet Authentication Client but how do I actually use it to sign my application?

• code-signing-certificate
• safenet

Share Improve this question Follow edited Mar 27 at 13:37 Paul Taylor asked Mar 27 at 10:48 Paul TaylorPaul Taylor 13.2k5454 gold badges217217 silver badges399399 bronze badges

Add a comment  | 

1 Answer 1

Sorted by: Reset to default 0

Okay I found the answer

Needed to install WindowsSDK to get signtool

The procedure was then as follows:

• Put USB stick in drive

• Open Safenet Authentication Client

• Run signtool as follows

C:\Program Files (x86)\Windows Kits\10\bin\10.0.26100.0\x64\signtool.exe sign /tr http://timestampodoca /td sha256 /fd sha256 /a SongKong-11.4.exe

• Enter Token Password

It is signed with the following output

Done Adding Additional Store
Successfully signed: SongKong-11.4.exe