›
Welcome to the SRP Forum! Please refer to the SRP Forum FAQ post if you have any questions regarding how the forum works.

Sectigo

jimvaughanjimvaughan
in OpenInsight
Is there a webpage anywhere that explains what I need to do use the usb stick I just received to allow signing of NSIS scripts?

If I am correct I first need to somehow unlock the stick and then make modification to my NSIS script? Is this correct?

Comments

  • KevinFournierKevinFournier
    edited July 20
    Here's Sectigo's page on how to sign using SignTool. They tell you to download the Windows SDK to get SignTool, but you can also grab it from our DropBox here.

    You can use the command line they give you to sign any EXE or DLL, which will cause the thumbstick to prompt you for a password. Once you get that working, you can add the following line to your NSIS script to save you one step in that it will run the command line automatically after compiling your script:

    This is what mine looks like in the SRP Editor installer script. You'll have to adjust accordingly.

    !finalize '"W:\signtool.exe" sign /n SRP /td sha256 /fd sha256 /tr http://timestamp.comodoca.com "%1"'
  • jimvaughanjimvaughan
    Got it, thanks Kevin, let me give it a try.
  • jimvaughanjimvaughan
    Sectigo says:

    "You may need to install additional software to access the certificate on the selected media (token/smartcard). We suggest downloading SafeNet, although there are many applications you can utilize. You can download SafeNet software from this link. Once you receive your e-token, enter the following password."

    Is this something I need to do before using signtool?

    Thanks for your help btw this is all new to me.
  • KevinFournierKevinFournier
    I honestly can't remember. I banged my head through this process about two years ago. I wish I could tell you exactly what I did, but you might have to tap on AI for this one.
  • jimvaughanjimvaughan
    Ha, OK. I'll post what I find out here, maybe it will help someone else.
  • jimvaughanjimvaughan
    So I go here https://sectigo.com/knowledge-base/detail/SafeNet-Authentication-Client-Download-for-Sectigo-Certificates-on-eToken and install the software.

    Run SafeNet, choose unlock, enter my unlock code and it fails with an error. Have support request setup with Sectigo. I'll let you know how it goes.
Sign In or Register to comment.