Using CodeSign

signtool.exe signwizard

Choose the file you want to sign and then click next.

Choose custom and then click next.

Click select from file.

Select X.509 Certificate (.cer;.crt) from the drop down, select your signing certificate, then click open.

Verify that this is the correct certificate and then click next.

Click Browse (CSP and Provider type should be left as seen above)

Select the .pvk file you created earlier.

Verify that you have chosen the proper pvk file, then click next.

Choose sha1 (this is default) and click next.

Select "All certificates in the certification path, except for the root certificate" and then click next.

These fields are optional.  Click next.

Check add a timestamp to the data and enter timestamp Now click next.

Click finish.

All done

If you signed an exe you can run it at this time to see the new signature.

Click the publisher link to see more details.

Small FAQ

• generation privateKey and CSR
• private key .pvk file
• csr .req file
• Certificate .spc file
• PEM pass phrase - пароль на доступ к PrivatKey
• challenge password - Пароль запуска