Inno Setup - Signing fails with “Sign Tool failed

Question

I have Inno Setup script, where I need to use the SignTool=signtool, which is configured properly and worked in past.

But it's failing when I try to compile with the following error:

Sign Tool failed with exit code 0x1.

Answer 1

When using an EV with a token, you can assign the fingerprint using /a /sha1 [Hash].

like so:

signtool sign /tr http://timestamp.digicert.com /td sha256 /fd sha256 /sha1 certfingerprint $f

This will make signtool to choose the cert from token.

More info: https://docs.microsoft.com/en-us/dotnet/framework/tools/signtool-exe

Answer 2

You didn't provide us any information that we can use to debug your problem.

So I'm posting generic instructions to debug issues with a "sign tool".

1. Try command-line compiler (ISCC.exe). It will preserve a full signtool.exe error message in the output:

   

2. Or temporarily prefix the sign tool command with cmd.exe /k to preserve its output even when compiling in Inno Setup GUI Compiler. E.g.:

   cmd.exe /k C:\path\to\signtool.exe sign /f C:\mykey.pfx $f
   

   

---

See also signtool fail with Inno Setup with exit code 0x1.