Skip to main content

Getting Started with Microsoft SignTool

This section provides a comprehensive guide outlining the 3 steps necessary to integrate Microsoft SignTool with Securosys CloudHSM or on-premises Primus HSM.

1. Install the Primus CNG/KSP Provider​

Refer to the Primus MS CNG Provider documentation on how to download, install and configure the Primus CNG/KSP Provider.

note

Ensure the CNG API is licensed and activated on your HSM device.

2. Install new Signing key & Certificate​

  • Check the prerequisites
  • Complete the installation.
    • Prepare the signing key request sample request.inf file,
    • generate the signing key and self-signed certificate with the previously created request file,
    • generate the signing key and public signed certificate with the request file,
    • validate your signing certificate.

3. Start Signing Files​

Now you are ready to sign your files or timestamp codes, certificates, etc. using the Microsoft signtool.exe.

Follow the tutorial to sign files with Microsoft SignTool and:

  • Sign an example application,
  • Verify the signed application (file) either via CLI or GUI.