- Revenera Community
- :
- InstallShield
- :
- InstallShield Forum
- :
- Code Signing via Azure Key Vault
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Subscribe
- Mute
- Printer Friendly Page
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
Code Signing via Azure Key Vault
Hi,
Is there any support (existing or planned) for code signing via Azure key vault?
Thanks
- Tags:
- code signing
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
@rguggisberg did you find a solution or answer to this?
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
No. Our build team is signing outside of InstallShield as a step in the build process.
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
I was thinking of doing the same thing but since our Setup.exe includes an MSI, the MSI won't be signed. Are you not using Setup.exe or did you find a way around this?
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
Hi @RWatson,
If you are using premier edition of installshield, you can use the pre compression event available under event tab of releases to sign the msi using your signtool command, which will sign this msi before compression.
https://docs.revenera.com/installshield25helplib/helplibrary/IReleaseBuildEventPreComp.htm#:~:text=Use%20the%20Precompression%20Event%20dialog,cab%20files).
Please refer attached screenshot.
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
This pattern would work but doing it this way would expose the secrets as they would either be in plain text in the ism file or would have to be passed in as a parameter of the build and stored as a property at runtime.
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
@varul is it possible to pass a property in the event command line? I want to pass [ProductVersion] to my signtool
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
Hi @RWatson ,
What version you want to pass it to signtool, I dont think signtool support productversion property. You can check supports properties of signtool in azure documentation.
If You want to pass the version to setup.exe you can pass it to iscmdbld.exe
-y <product version> Refer below help link
https://docs.revenera.com/installshield28helplib/helplibrary/ISCmdBldParam.htm
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
@varul I'm writting an exe to be called during the command line event to sign the MSI. I want to pass a variable to it during that command line. I have -y being passed into the ISBuildCmd but I want to be able to pass [ProductVersion] to my exe during the pre compression event.
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
@varul I tried using this method and call the signtool during the "Precompression Event". I am getting zero errors in my log and it looks like my event is completing successfully. Once I have an exe result, I extracted my MSI and it is not signed.
![](/skins/images/8CE4FAD0DE6F3A6F9D0567434D2D2DAE/responsive_peak/images/icon_anonymous_message.png)