Microsoft KB Archive/899713

= An .exe file may not be signed after you compile the .exe file by using SMS Installer with the “Create a code-signed installation” option in SMS 2003 =

Article ID: 899713

Article Last Modified on 5/25/2007

-

APPLIES TO


 * Microsoft Systems Management Server 2003

-





SYMPTOMS
After you compile an .exe file by using Microsoft Systems Management Server (SMS) Installer with the Create a code-signed installation option, the .exe file may not be signed.

Note Even if SMS Installer did not sign the .exe file, you may not receive any error messages.



CAUSE
This problem can occur if you have a newer version of the Signcode.exe program on the computer that is incompatible with SMS Installer. SMS Installer uses the Signcode.exe program to sign an .exe file when you select the Create a code-signed installation option. SMS Installer may use parameters that are incompatible with the parameters that the newer version of the Signcode.exe program uses. In this case, the Signcode.exe command will fail and the .exe file will not be signed.

Note SMS Installer runs the Signcode.exe program from the Windows directory (%windir%).



WORKAROUND
To work around this problem, use SMS Installer to compile an .exe file and then manually run the Signcode.exe program to sign the .exe file.

To do this, follow these steps:
 * 1) Start SMS Installer
 * 2) On the View menu, click Installation Expert.
 * 3) Under Installation Attributes, click Advanced Configuration, and then click Properties.
 * 4) On the Signing tab, click Create a code-signed installation, leave all input fields in this dialog box empty, and then click OK.

Note SMS Installer uses these input fields as parameters to pass to the Signcode.exe program.
 * 1) Click Compile to compile the .exe file.
 * 2) Run the Signcode.exe program at the command prompt by using syntax that is similar to the following:

signcode.exe -spc &quot;file.spc&quot; -v &quot;file.pvk&quot;

After you have manually signed the .exe file, you can use the Chktrust.exe command-line tool to verify whether the file has been correctly signed.

Note The Signcode.exe and the Chktrust.exe command-line tools can be downloaded as part of the Internet Client SDK. These tools are also included with Microsoft Visual Studio .NET 2003.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.

