Inno Setup - Signing fails with "Sign Tool failed with exit code 0x1"

Question

I have Inno Setup script, where I need to use the SignTool=signtool, which is configured properly and worked in past.

But it's failing when I try to compile with the following error:

Sign Tool failed with exit code 0x1.

Have you tried to run Sign command directly via command line to see if it also fails? You'd see proper error message then. Are you able to compile your installer without Signing? I have encountered simillar issue once where Windows blocked access to installer's temporary files because it treated `Compil32.exe` as untrusted process. — RobeN, Sep 25 '16 at 11:40

Martin Prikryl · Accepted Answer · 2020-07-14T05:53:02.160

You didn't provide us any information that we can use to debug your problem.

So I'm posting generic instructions to debug issues with a "sign tool".

Try command-line compiler (ISCC.exe). It will preserve a full signtool.exe error message in the output:
Or temporarily prefix the sign tool command with cmd.exe /k to preserve its output even when compiling in Inno Setup GUI Compiler. E.g.:
```
 cmd.exe /k C:\path\to\signtool.exe sign /f C:\mykey.pfx $f
```
Note that if you use a path to signtool.exe with spaces, due to the way cmd works, you have to wrap not only the path itself to double quotes, but also the whole command:
```
 cmd.exe /k ""C:\path to signtool\signtool.exe" sign /f C:\mykey.pfx $f"
```

score 0 · Answer 2 · edited Dec 27 '18 at 06:46

0

When using an EV with a token, you can assign the fingerprint using /a /sha1 [Hash].

like so:

signtool sign /tr http://timestamp.digicert.com /td sha256 /fd sha256 /sha1 certfingerprint $f

This will make signtool to choose the cert from token.

edited Dec 27 '18 at 06:46

Suraj Rao

answered Dec 27 '18 at 06:30

Lauro Oliveira

2 Answers2