无法创建零售图像，因为签名二进制文件未获取代码签名证书 [英] unable to create retail image as code signing certificate is not picked up for signing binaries

问题描述

大家好，

         我无法使用EV代码签名证书构建16299.64 Windows IoT核心操作系统零售版，并遵循mirosoft docs中概述的所有说明 -   https://docs.microsoft.com/en-us/ windows-hardware / manufacture / iot / build-retail-image。

         证书正在用于构建此映像的计算机的个人存储中。我正在使用16299 v4.4工具包来构建它。我也尝试过最新的master，v3.2等但是在尝试buildpkg all时总是得到
同样的错误（SignTool错误：没有证书是发现符合所有给定的标准。）。代码签名证书甚至没有出现在证书列表中。它显示签名的测试证书为
，当然，零售签名完成后不会显示。

         此问题也列在GitHub链接的工具包问题中​​ -   https://github.com/ms-iot/iot-adk-addonkit/issues/219

         任何有关这方面的帮助将不胜感激

问候

解决方案

Hello Shridhar，

我们最新版本的
addonkit是4.4 你可以下载并试试吗？

需要更多信息：

ADK，WDK和COREKIT版本。

为ARM，x86或x64构建你的构建吗？

一个建议：你可以先使用测试证书来运行buildpkg all命令。如果此操作成功，则使用EV代码签名证书。

祝您好运，

Rita

Hi All,

         I am unable to build a 16299.64 Windows IoT Core OS retail build by using the EV Code signing certificate and following all the instructions as outlined in the mirosoft docs - https://docs.microsoft.com/en-us/windows-hardware/manufacture/iot/build-retail-image.

         The certificate is being installed in the Personal store of the machine which is used to build this image. I am using the 16299 v4.4 toolkit to build it.I have also tried the latest master, v3.2 etc but always getting the same error when trying to buildpkg all (SignTool Error: No certificates were found that met all the given criteria.). The code-signing certificate is not even showing up among the list of certificates. It shows the test certificates as available for the signing which of course don't show up after the retailSign On is done.

         This issue is also listed amongst the toolkit issues on GitHub link here - https://github.com/ms-iot/iot-adk-addonkit/issues/219

          Any help on this would be greatly appreciated

Regards

解决方案

Hello Shridhar,

We can that the latest version of addonkit is 4.4 and you can download and have a try?

And more information need:

ADK, WDK and COREKIT versions.

Do your build for ARM, x86 or x64?

One suggestion: You can use test certificate to run buildpkg all command first. If this operation succeed then use EV Code signing certificate.

Best regards,

Rita

这篇关于无法创建零售图像，因为签名二进制文件未获取代码签名证书的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！