Code Signing for Windows

Signtool

Signtool comes as a part of Windows 10 SDK. The binary is typically installed at

C:\Program Files (x86)\Windows Kits\10\bin\__version__\x64

1. Install (or generate the certificate) into Windows Certificate Center. EV certificates should also be installed, but signing them requires the hardware key to be present at the time of signing

2. Very basic sign command line:

signtool sign project1.exe

See Also

• Code signing
• https://docs.microsoft.com/en-us/windows/win32/seccrypto/signtool - official documentation