Certificate Update

[groseyal]

Hi,
I'm using InstallAware 2012.
My certificate is expired and i need to update link to the neo.spc and neo.pvk files for each setup.exe file i have (have over 100 files).
Is there any script i can run which will update it to all my setup.exe files?

Regards,

Eyal Grossberg.

[FrancescoT]

Dear Eyal,

using a script it is not possible, but you can pass the required files using a command line.
In this case, you must first remove the references to those files from your previous projects.

Example:

miabuild "C:\Mysetup\mysetup.mpr"

Signcode.exe -spc TestCert.spc -v TestCert.pvk "C:\Mysetup\Release\Setup.exe" -t "http://timestamp.verisign.com/scripts/timstamp.dll"

Note
MPR project file - it’s a plain text file, and should be pretty easy to locate the place where the Authenticode signature is located.

Hope this helps you.

Regards

[groseyal]

Hi,
Thank you for your reply.
i will put the new spc and pvk files in the same path as the previous one, therefore i only need to rebuild the project files.
What is the command for building the MPR project file ?

Regards,

Eyal Grossberg.

[FrancescoT]

Dear Eyal,

as I described with my previous post;

miabuild "C:\Mysetup\mysetup.mpr"

Regards

[groseyal]

Hi,
I tried to run the command from the windows command-line shell and got an error :
" 'miabuild' is not recognized as internal or external command, ... "

should i use other installaware command-line shell?
If yes, how i get there.

Regards,

Eyal Grossberg

[groseyal]

Hi,
I didn't find the miabuild.exe file.
Does my problem relates to my installed version?
I use Express 2012 with the very Basic installation.

Regards,

Eyal Grossberg.

[FrancescoT]

... Command line build it is not available with InstallAware Express edition.

For editions features please refer to:
http://www.installaware.com/right-edition.htm

Regards

[groseyal]

Hi,
Thank you very much.
I just upgrade my installAware version and it's working.
I have two more questions please,
1. Regarding to the time stamp URL file (http://timestamp.verisign.com/scripts/timstamp.dll), can i remove it? should it change when i changing the certificate?
2. When i run the exe file of the Istall program i created, where i can find/check the certificate licence validity date?

Regards,

Eyal Grossberg.

[FrancescoT]

Dear Eyal,

you can use the time stamp URL provided by any certification authority. This must be used in order to certify the build date.
You should have received information about it, by The certification authority where you acquired your certificates.

For what I know there is no need to check it, because once expired, a warning will pop up when you execute your setup.

Regards

[groseyal]

Hello,

Thanks for the help.

Unfoterlanly it doesn't work.
We try to build without Time stamp URL and Password data (which are optional).
we have spc and pvk files and each time we run the build it fails with error: "Error during build: Unable to sign installation executable"

Regards,

Eyal Grossberg.

[FrancescoT]

Have you tried if work in the following way?

Signcode.exe -spc TestCert.spc -v TestCert.pvk "C:\Mysetup\Release\Setup.exe"

Regards

[groseyal]

Hi

since miabuild command is part of the developer version we can use it to create builds in command line
I haven't find signcode, how can i get it? and is there any documentation regarding the signcode parameters

in addition,as I undertand. I sould use the miabuild on an MPR project to creat the excutable file WITHOUT the authenticode signature and after completion run the signcode suggested command.
did i understand correctly?

Best regards,

Eyal Grossberg.

[FrancescoT]

Dear Eyal,

Yes it is correct.

Basically I suggested this to verify if using SignTool directly .. it works.

The SignTool it is located in "authenticode" folder under "InstallAware 2012".
For what I know it should be available with IA Developer edition (I'll check it).

Can you confirm it?

Regards

[groseyal]

Hi,
Yes, I found the command there.
Due to some problem in rendering certificate files (pvk, spc), i am using now only a pfx file.
i got new password and time stamp URL file.
I tried to use the Signcode command for it, but it not fit.
Which command should i use in order to update the certificate ?


Regards,

Eyal Grossberg.

[FrancescoT]

Dear Eyal.

have you tried this?

signtool sign /t <timestampurl> /f "<file.pfx>" /p pfxpassword "<filetosign.exe>"

Regards