Digitally sign you files

Releasing software, I find it necessary to sign my msi files. If you do have the certificate (of course you have, right?), its quite easy.

If you only need to sign a file, and really don't want to import the certificate into your local store, typing signtool.exe signwizard from your command console will do. This brings up a wizard that lets you choose the file to sign, lets you choose to use a certificate from you local store or from a file, certain parameters (no big surprises there really) and overwrites the old unsigned file with the newly now signed one. Its that easy.

If you want to run signtool in an automatic process, its no problem to do so, Stuart Preston's blog has a nice entry that tells you how