How to: add a digital signature to an executable file

In order to add a digital signature to an executable file, a certificate license is required. However, you can have a “test” certificate license with “makecert.exe” and “Certmgr.exe.” Here are the steps for signing a digital signature during development stage.

1. makercert -r -pe -sr localMachine -ss Test -n "CN=Ying-Pin Hung (Floyd) –FuDream Group" testcert.cer
2. Certmgr –add testcert.cer -s -r localMachine Root
3. signtool.exe Sign /v /s Test /n " Ying-Pin Hung (Floyd) –FuDream Group " application.exe

However, signtool does not provide timestamp function by its own. Therefore, you need to get a timestamp in another step.

1. signtool.exe timestamp /v /t “http://timestamp.verisign.com/scripts/timstamp.dll “ application.exe

Be aware of this post, this signature is for development stage. You can get a real signature from CA, such as VeriSign, Inc.