Automating The Build Process; Adding A Digital Signature To An Installation - Symantec WINDOWS INSTALLER EDITOR 8.0 Reference

Adding a Digital Signature to an Installation

Windows Installer Editor Reference

Automating the Build Process

You can use the WFWI.exe command-line options in conjunction with other processes to
create an automated build process.
Enter the following command-line statement into a batch file or any other program that
has the ability to run command-line statements, such as Scheduled Tasks in Control
Panel:
"path\WFWI.EXE" "path\project file" /c /o "path\output file" /s
where:
"path\WfWI.exe" is the path to the Wise executable
"path\project file" is the path to the installation (.WSI) or merge module (.WSM)
project file to compile
"path\output file" is the location of the compiled installation (.MSI) or merge module
(.MSM)
Use the Digital Signature page to add an Authenticode digital signature to an installation
file so its integrity and authenticity can be verified.
Digital signature methods
The file signing tool that is used to digitally sign a file depends on the type of your digital
certificate:
Public/private key pair files
This method requires a credentials file (.SPC or .CER) and a private key file (.PVK).
This method is supported by the signcode.exe tool. For details, search for
"Signcode" in the MSDN Library (msdn.microsoft.com/library/).
Personal Information Exchange file
This method requires a Personal Information Exchange file (.PFX), which is a
container file for the public/private key information. This method is supported by the
signtool.exe tool. For details, search for "Signtool" in the MSDN Library
(msdn.microsoft.com/library/).
Requirements
You must have a valid code signing certificate, which you can obtain from a
commercial certificate authority such as Verisign. For a list of certificate authorities,
search for "Microsoft Root Certificate Program Members" in the MSDN Library
(msdn.microsoft.com/library/).
You must have the signtool.exe or signcode.exe tool on your computer.
Signtool.exe requires the CAPICOM 2.0 redistributable to be installed and registered
on your computer. CAPICOM provides services for digitally signing applications, and
is available from the Microsoft Web site.
The location of signtool.exe or signcode.exe must be specified on the Digital
Signature tab in Wise Options, or they must be available on the system path.
Advanced Installations
240