An .exe file may not be signed after you compile the .exe file by using SMS Installer with the "Create a code-signed installation" option in SMS 2003 (899713)


The information in this article applies to:

  • Microsoft Systems Management Server 2003

SYMPTOMS

After you compile an .exe file by using Microsoft Systems Management Server (SMS) Installer with the Create a code-signed installation option, the .exe file may not be signed.

Note Even if SMS Installer did not sign the .exe file, you may not receive any error messages.

CAUSE

This problem can occur if you have a newer version of the Signcode.exe program on the computer that is incompatible with SMS Installer. SMS Installer uses the Signcode.exe program to sign an .exe file when you select the Create a code-signed installation option. SMS Installer may use parameters that are incompatible with the parameters that the newer version of the Signcode.exe program uses. In this case, the Signcode.exe command will fail and the .exe file will not be signed.

Note SMS Installer runs the Signcode.exe program from the Windows directory (%windir%).

WORKAROUND

To work around this problem, use SMS Installer to compile an .exe file and then manually run the Signcode.exe program to sign the .exe file.

To do this, follow these steps:
  1. Start SMS Installer
  2. On the View menu, click Installation Expert.
  3. Under Installation Attributes, click Advanced Configuration, and then click Properties.
  4. On the Signing tab, click Create a code-signed installation, leave all input fields in this dialog box empty, and then click OK.

    Note SMS Installer uses these input fields as parameters to pass to the Signcode.exe program.
  5. Click Compile to compile the .exe file.
  6. Run the Signcode.exe program at the command prompt by using syntax that is similar to the following:

    signcode.exe -spc "file.spc" -v "file.pvk" file.exe

After you have manually signed the .exe file, you can use the Chktrust.exe command-line tool to verify whether the file has been correctly signed.

Note The Signcode.exe and the Chktrust.exe command-line tools can be downloaded as part of the Internet Client SDK. These tools are also included with Microsoft Visual Studio .NET 2003.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

REFERENCES

For more information about the File Signing tool (Signcode.exe), visit the following Microsoft Developer Network (MSDN) Web site:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cptools/html/cpgrffilesigningtoolsigncodeexe.asp

For more information about the Certificate Verification tool (Chktrust.exe), visit the following MSDN Web site:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cptools/html/cpgrfCertificateVerificationToolChktrustexe.asp

Modification Type:MajorLast Reviewed:7/20/2005
Keywords:kbtshoot kbprb KB899713 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.