Digital Signature

Add Digital Signature to Your Program

M3 can provide a utility to add digital signature to a program. Unsigned program will show a warning message as shown in the below image when you launch the program.

“The program is from an unknown publisher. Running it can possibly harm your device. Do you want to continue?"

To avoid the warning message pop up, the program needs to be signed and this document will guide through the signing process.

i. Cancellation of All Security Setting.

Set 0000101a Value as 1 from [HKEY_LOCAL_MACHINE\Security\Policies\Policies]

This is not acutally signing the application. It will low the security level so that the device will not ask for the signature.

ii. Digital Signing Process

Download the digital signing utility (DigiSign.zip). It will be provided as a zip file which contains “signcode.exe, OEMShipCA.spc and OEMShipCA.pvk”. Once you receive the utility, unzip it to a folder and make sure you have the tree files.
Copy .exe or .cab* file of your program to the same folder where the signing utility is unzipped.

* Supported file format: .exe, .dll, .ocx, .cab, .stl, .cat
Launch signcode.exe.
When the utility launches, follow the directions displayed on the screen. Click next to continue.
Click browse and select a file that you wish to add digital signature then click next.
Select Custom when it ask for signing option.
Click Select from File then select OEMShipCA.spc.
Choose private key file on disk and select OEMShipCA.pvk file.
Select hash algorithm. By default it is set to sha1.
Select additional certificate options as required. It is optional. You can just click next to continue.
Data description is also optional. You can just click next to continue.
Time stamp is also optional. You can just click next to continue.
Adding a digital signature to a file has been complete
You can check it from the properties menu of the file.