AutoIt

Code Signing using Sectigo USB Token

See more Code Signing Examples

Demonstrates how to Authenticode sign an EXE or DLL using a SafeNet USB token from Sectigo.

Requires Chilkat v10.0.0 or greater.

AutoIt

Local $bSuccess = False

; This example requires the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.

; First create the following JSON to specify that SHA256 is to be used,
; and provide timestamp server information.

; {
;   "hashAlg": "sha256",
;   "timestampToken": {
;     "enabled": true,
;     "tsaUrl": "http://timestamp.digicert.com",
;     "requestTsaCert": true,
;     "hashAlg": "sha256"
;   }
; }

$oJson = ObjCreate("Chilkat.JsonObject")
$oJson.UpdateString("hashAlg","sha256")
$oJson.UpdateBool("timestampToken.enabled",True)
$oJson.UpdateString("timestampToken.tsaUrl","http://timestamp.digicert.com")
$oJson.UpdateBool("timestampToken.requestTsaCert",True)
$oJson.UpdateString("timestampToken.hashAlg","sha256")

; The only difference in signing with a smartcard or USB token
; is that the cert is loaded from a smartcard or USB token, instead of a PFX or from elsewhere
; such as from the Windows certificate store.
$oCert = ObjCreate("Chilkat.Cert")

; Use your USB token PIN (user password).
; It will be a string similar to this:  j6X54nB7-jlp5Cr2
$oCert.SmartCardPin = "j6X54nB7-jlp5Cr2"

; Load the certificate based on the serial number.
; *** Use your certificate's serial number.
$bSuccess = $oCert.LoadFromSmartcard("serial=3FF5B69109BFD4046C92CC0D18EE23C2")
If ($bSuccess = False) Then
    ConsoleWrite($oCert.LastErrorText & @CRLF)
    Exit
EndIf

; Note: If the above fails, then use the SafeNet Authentication Client Tools
; to login to your token using your token password.
; You don't want too many failed logins, otherwise you'll lock the token.
; A successful login will reset number of failed logins back to 0.

; Note: This is to sign Microsoft Windows executables or DLLs
; You can sign .exe or .dll files.
Local $sExePath = "C:/someDirectory/HelloWorld.exe"

$oSigner = ObjCreate("Chilkat.CodeSign")

; If successful, the following call will apply the signature to the EXE (or DLL).
$bSuccess = $oSigner.AddSignature($sExePath,$oCert,$oJson)
If ($bSuccess = False) Then
    ConsoleWrite($oSigner.LastErrorText & @CRLF)
    Exit
EndIf

ConsoleWrite("Successfully applied the Authenticode signature." & @CRLF)