Signtool usage with Nitrokey HSM

Nitrokeys
18

I’ve managed to perform a code signing operation using signtool with a test key I generated on a SmartCard-HSM. Here is what I did:

  1. Generate a RSA 2048 key pair and a certificate with extended key usage id-kp-codeSigning.
  2. Run certutil -scinfo to display the certificate
  3. Select “Import” in the certificate details view
  4. Verify that the certificate shows up in certmgr.msc
  5. Use signtool filetosign.exe
1 Like