Code signing issue


I'm trying to sign a .CAB file (ActiveX) application. I've got a certificate and it's installed in the "Other People" store of my PC's certificate stores. Whenever I try and use signtool.exe, I'm told "No certificates were found that met all the given criteria"

Internet research suggests that maybe a private key is missing, but I'm not educated enough to know where a private key may be found for this.

Can someone walk me through this?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Duy PhamFreelance IT ConsultantCommented:
How did you get that Certificate? If you enrolled it from a machine that you have control, install that Certificate on that machine, then you will have Private Key in installed Certificate. Export it to PFX file (include private key) for signing.
skbohlerAuthor Commented:
Thank you for your reply.

I purchased it from Verisign via a Firefox browser on my PC. In Internet Options, there is no option to export the certificate to PFX format. Only .CER of .P7b formats. The certificate installed to my "Other People" store, not my "Personal" store. I can't seem to get it to install in the Personal store. Not sure if that's the issue.
Duy PhamFreelance IT ConsultantCommented:
Try to open Certificates Snap-in in MMC (Microsoft Management Console), remember to choose Computer Account (Local Computer). And then manually Import the .CER file into Personal store, to see if Certificate can match with Private Key from your machine.

If it doesn't help, you might have to contact VeriSign for further guidance. Or you can actively revoke and replace your code signing certificate.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
skbohlerAuthor Commented:
OK, I revoked the certificate and had a new one reissued. I made sure I used Internet Explorer the whole time, and it seems to have installed correctly now.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.