Create a self signed certificate to digitally sign exe files

It only needs a few simple steps to operate ：

1、 Run with administrator privileges PowerShell

2、 Execute the following command

New-SelfSignedCertificate -Type Custom -Subject "CN= full name , O= Corporate name , C=CN, L= Shanghai , S= Shanghai " -KeyUsage DigitalSignature -FriendlyName "MailTool" -CertStoreLocation "Cert:\CurrentUser\My" -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.3", "2.5.29.19={text}") -NotAfter (Get-Date).AddYears(10)

 3、 Execute the following command

$password = ConvertTo-SecureString -String 123456 -Force -AsPlainText

4、 Execute the command to export the certificate , You have to modify the path and other information according to the actual situation

Export-PfxCertificate -cert "Cert:\CurrentUser\My\1F1B377E08BE74E2D739F0FC638370A93DF0D946" -FilePath C:\Users\admin\Desktop\dump\ Signature \test.pfx -Password $password

  Let's look at the signature catalogue , The following has been generated test.pfx file

 

5、 Now we use certificates to Test.exe To sign ：

Administrator run CMD Command line , And switch to the signature directory , Execute the following command ：

"C:\Program Files (x86)\Windows Kits\10\bin\10.0.17763.0\x64\signtool.exe" sign /f test.pfx /p 123456 /t http://timestamp.digicert.com /v "test.exe"

This signtool.exe It's installation Windows I brought it with me when I developed the package , My path , Specific search , The result of executing the command is like this ：

  Let's look at Test.exe Certificate

 

Okay , It's all right . 

Reference article ：

Microsoft official documents ：

New-SelfSignedCertificate (pki) | Microsoft Docs

SignTool.exe (Sign Tool) - .NET Framework | Microsoft Docs

Blog ：

https://www.jianshu.com/p/526fbb0e3134