How to Securely Sign Executable, Installation and Package Files Using Digital Certificates

Table of Contents

• Introduction
• Registration
• Using Advanced Installer
  • GUI
  • Working with Projects
  • Installer Project
    * Product Information
    * Product Details
    * Digital Signature
    * Digital Signature Settings Tab
    * Files Configured for Signing Tab
    * Updater
    * Upgrades
    * Licensing Page
    * CD/DVD Autorun
    * Multiple Instances Page
    * Resources
    * Package Definition
    * Requirements
    * User Interface
    * System Changes
    * Server
    * Custom Behavior
  • Patch Project
  • Merge Module Project
  • Updates Configuration Project
  • Windows Store App Project
  • Modification Package Project
  • Optional Package Project
  • Windows Mobile CAB Projects
  • Visual Studio Extension Project
  • Software Installer Wizards - Advanced Installer
  • Visual Studio integration
  • Alternative to AdminStudio/Wise
  • Replace Wise
  • Migrating from Visual Studio Installer
  • Keyboard Shortcuts
  • Shell Integration
  • Command Line
  • Advanced Installer PowerShell Automation Interfaces
• Features and Functionality
• Tutorials
• Samples
• How-tos
• FAQs
• Windows Installer
• Deployment Technologies
• IT Pro
• MSIX
• Video Tutorials
• Advanced Installer Blog
• Table of Contents

Disclaimer: This post includes affiliate links

If you click on a link and make a purchase, I may receive a commission at no extra cost to you.

Digital Signature: Sign MSI, EXE and MSP files

The following article uses options that are available starting with the Professional edition and project type.

Advanced Installer can digitally sign all of the following files that it creates: EXE, MSI, MSP (patches) and CAB files. The EXE, MSI and MSP files are always signed while the CAB files are only signed if they are not embedded in the MSI.

You also can individually sign each file from your package by enabling this option in the File Properties Tab , Files and Folders view.

Signing utilities

SignTool.exe

The default tool, available with the Windows SDK v8.0 or higher, used by Advanced Installer. TheSignTool.exe utility tool can be used only with certificates exported as PFX files. can be used only with certificates exported as PFX files. You can use either pvkimprt or pvk2pfx to create a PFX certificate from the SPC and PVK files.

Topics

• Digital Signature Settings Tab
  Configure the digital signature of your package.
• Files Configured for Signing Tab
  Configure the files to be signed contained by the package.

Did you find this page useful?

Please give it a rating:

Thanks!

Report a problem on this page

Information is incorrect or missing

Information is unclear or confusing

Something else

Can you tell us what’s wrong?

Send message

Also read: