This problem also plagued me for a long time.
Finally, under my tireless efforts, the digital signature is I get, now come to share my experience for everyone.
After the success in the following figure:
OK, now began to dry positive!
1. Prepare tools.
Tools need to be prepared are:
1.makecert.exe
2.signcode.exe
2. Start production.
first step:
Win + R key "cmd" to open a command prompt, enter the first letter of your makecert located. If your makecert in the D drive, then enter D:, and then press Enter
Step two:
Enter cd <directory where your makecert.exe>
The third step (the most important critical step)
Enter the command at the command prompt:
makecert / sv "private name .pvk" / n "CN = grantor name, E = mail, O = organization name" -r file name .cer
He will then prompt you to create a private key password.
After creating the private key password, if successful, it will prompt Succeeded.
The fourth step (also very important)
Win + R open mmc
Then, press Ctrl + M, will pop up the Add or Remove Snap-in, locate the "Certificate"
Then click Add, direct point, it was determined, then you will find that you're back again, then, according to the operations shown in the picture.
Then click on the "All Tasks - Import", then the first to directly determine the second path select your certificate,
Then been the next step ,
Click OK,
It will be displayed after a successful import was successful. Then save your changes, close mmc, and then open signcode.exe.
First then the next step,
You then select the file to be signed,
Select Custom,
Then select your certificate, (note the filter to be selected X.509 certificate)
Then select your private key file, enter your private key.
Next twice,
Want to fill can be filled.
Then add a time stamp.
There are a lot of people do not know the timestamp server, I put a few here:
Digicert: http://timestamp.digicert.com
Symantec: http://sha256timestamp.ws.symantec.com/sha256/
Comodo: http://timestamp.comodoca.com
Starfield: http://tsa.starfieldtech.com
GlobalSign: http://timestamp.globalsign.com/scripts/timestamp.dll
Certum: http://time.certum.pl
或者直接去下载一个沃通代码签名工具，然后把文件拖进去，只点击一个时间戳就可以了。
第四步，大功告成。
成功后如下图。
是不是和开头的是一样的呀，这样就成功啦！
在下刚刚创建了一个小组，适合CPP\易语言\C#的开发者。有兴趣的可以去看一下哈（没兴趣的对不起！我不应该打广告的！）