Forum Discussion

Copper Contributor

Jun 30, 2022

Solved

The PowerShell script that's worked for 2 years to find a signing certificate, stopped working

This is an on-prem TFS question. Yesterday I put a certificate in place to handle signing ClickOnce deployments. However, it fails to apply the certificate. The guy who wrote these release scripts be...

Team Foundation Server

LainRobertson
Jul 08, 2022
Rod Falanga

I also meant to add: is there some reason Set-AuthenticodeSignature won't work for you?

The only gap I see between it and signtool.exe is the ability to control the timestamping algorithm, but I wouldn't have thought this would have mattered.

It would be a little easier/more readable to use Set-AuthenticodeSignature but if you need that finer-grain control from signtool.exe then that's fair enough.

Cheers,
Lain

LainRobertson

Silver Contributor

Jul 08, 2022

Rod Falanga

I also meant to add: is there some reason Set-AuthenticodeSignature won't work for you?

The only gap I see between it and signtool.exe is the ability to control the timestamping algorithm, but I wouldn't have thought this would have mattered.

It would be a little easier/more readable to use Set-AuthenticodeSignature but if you need that finer-grain control from signtool.exe then that's fair enough.

Cheers,

Lain

Rod Falanga

Copper Contributor

Jul 08, 2022

The only reason why Set-AuthenticodeSignature wasn't working for me is because I've never heard of it. I only learned of it yesterday. I switched out using SignTool with Set-AuthenticodeSignature. Set-AuthenticodeSignature works!!!!

Thank you very much for all of your help with this!!