WoSign Code Signing Certificate for Microsoft Authenticode
Signing Instrution

A WoSign Code Signing Certificate is strongly recommended for any publisher who plans to distribute code or content over the Internet or corporate extranets and needs to assure the integrity and authorship of that code. It support all version Windows OS and browsers.

Step 1: Download Signing Tools

The Platform SDK for Microsoft Windows contains the information and tools you need to develop Windows-based applications. You can use this SDK to develop both 32- and 64-bit applications. Make sure that you are running the most current version of the SDK.

To download the software development kit (SDK) for Windows 2003/XP/2000, go to: Microsoft Windows Server 2003 Platform SDK .
To download the software development kit (SDK) for Windows Vista, go to: Microsoft Software Development Kit for Windows Vista .

To install the minimal tools needed for signing your files only install the Tools and Redistributable Components of the Microsoft Windows Core SDK .

Step 2: Signing Files

Windows 2003/XP/2000
To sign, you will use the SIGNTOOL.EXE utility included in the Platform SDK. You will also need your Digital ID file (generally called MyCredentials.spc) and your private key (MyPrivateKey.pvk).
To sign your file using Windows Vista, please refer to this.

Sign your File

The following steps will walk your through signing with the GUI.

1. Go to: Start > Run
2. Type CMD and click Ok .
3. At the prompt change the directory to: C:\Program Files\Microsoft Platform SDK\Bin
4. Type: signtool signwizard
5. A wizard will appear, click Next .
6. Browse to find the file you would like to digitally sign, and click Next .
7. Select Custom then click Next .
8. Click Select from File and locate your MyCert.spc file. Click Next .
9. Click Select from File and locate your MyKey.pvk file. Click Next .
10. Select sha1 and click Next twice.
11. If you would like you can now enter a description of your file and a web site address where more information can be located, then click Next .
12. Select Add a timestamp to the data and in the Timestamp Service URL enter:                 http://timestamp.wosign.com/timestamp
13. Click Next .
14. Verify all of the information is correct and click Finish .
15. You have successfully signed your file.

Test Your Signature

The Platform SDK SIGNTOOL.EXE utility contains a command to check a digital signature before distributing your file.

1. Go to: Start > Run
2. Type CMD and click Ok .
3. At the prompt change the directory to: C:\Program Files\Microsoft Platform SDK\Bin
4. Type: signtool verify /pa /v <your-file-name>
   or: chktrust <your-file-name>
   Note : Replace <your-file-name> with the name of the file you signed.

When a code signed file is downloaded from a Web site using Internet Explorer, it will display this certificate to the user. If the file is tampered with in any way after it has been signed, the user will be notified and given the option to refuse installation.

Related Information

For more information about signing see the Microsoft Developer Network Website .

Free Test

    Please click here to test WoSign code signing certificate(with time stamping). or click here to test WoSign code signing certificate (without time stamping).