I currently try to automate and integrate the process of signing our msi file using an EV certificate. We have a windows machine with cygwin setup to which we connect from our CI machine. The exe files are built on CI and then copied over to the Windows machine to create msi files from them and then sign the msi files.

The problem is the automation of the signing process. We must(?) use a software called safenet authentication client to unlock the certificate which sits on a usb stick.

The command I use to sign is C:\\Program Files (x86)\\Windows Kits\\10\\bin\\10.0.17763.0\\x86\\signtool.exe sign /tr http://timestamp.comodoca.com /td sha256 /fd sha256 /a \"c:\\Users\\hero\\installer.msi\"

When I'm logged in via VNC SafeNet shows me a popup where I have to enter the password for the token/certificate. But when logging in via ssh into the machine no popup is shown and signtool immediately exists with an error: Error information: "Error: SignerSign() failed." (-2147023673/0x800704c7) I guess this is because of no password could be provided.

We also thought about using something like https://getautoma.com to put in the password but if there is no popup shown then this also doesn't work.

Does anybody know how I could automate this workflow?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.