SignCode

SignCode is a simple and lightweight command-line application specifically designed to code-sign portable executable files (PE files) using AuthentiCode. This can improve the trust of users in your application, since they can check to see if a file has been tampered with.

The application only works via the command line window or PowerShell, requiring the URL of a valid timestamp server to be able to work properly. It can run operations in batch, meaning you can add as many files as you want as arguments to be code-signed in one go.

There are not so many options available, and each of them is explained in the console window. The “/n” command requires you to specify the name of the subject or the SHA1 thumbprint of the signing certificate. If this option is omitted, the application reads CertName and TimeStampUrl in signcode.ini.

For instance, you can use SignCode to code sign all the executable files in a certain directory by a certificate having “Softpedia” as a SHA1 thumbprint.   The second option, “/t”, specifies the URL of the RFC 3161 timestamp server.

Optionally, you can configure SignCode to output a status and success message.  SignCode allows you to sign an app package without a lot of hassle, delivering a console-based application with few options but quick and easy to use.