Windows Sdk 8.1 Download

Return to site

Windows Sdk 8.1 Download

はじめに タイトルの通り「Visual Studio 2019で Windows SDK 8.1 を利用する方法」です。Visual Studio 2019 から Visual Studio Installer を利用して Windows SDK 8.1 をインストールする事ができなくなりました。 この記事では Windows SDK 8.1 を直接ダウンロードし、利用する方法を紹介します。 Ⅱ. The Windows 10 SDK (10.0.19041.0) for Windows 10, version 2004 provides the latest headers, libraries, metadata, and tools for building Windows 10 apps. Use this SDK to build Universal Windows Platform (UWP) and Win32 applications for Windows 10, version 20H2 and previous Windows releases. Download and install the Windows 7 SDK. Older versions Some of the older version are no longer supported, further information is available at Obsolete Build Caveats and Tips en-US under the Windows SDK article.
Windows Sdk 8.1 Download Msdn
Windows Sdk 8.1 Download
Related searches» microsoft windows defender windows 8.1
» windows installer sdk 8.1
» windows 8.1 egis 603 sdk
» validity sdk sensor windows 8.1 driver
» windows sdk 8.1 debuger安装
» microsoft games for windows 8.1
» windows 8.1 microsoft toolkit 2.49
» microsoft works 9.0 se for windows 8.1
» hp esu for microsoft windows 8.1
» microsoft visual j runtime windows 8.1
microsoft windows sdk 8.1 at UpdateStar More Microsoft Windows SDK for Windows 7.1.7600.0.30514
More Microsoft Visual C++ 2008 Redistributable 11.0.61030.0 The Microsoft Visual C++ 2008 Redistributable Package installs runtime components of Visual C++ Libraries required to run applications developed with Visual C++ on a computer that does not have Visual C++ 2008 installed. more info...
More Microsoft Visual C++ 2010 Redistributable 12.0.30501 The Microsoft Visual C++ 2010 SP1 Redistributable Package installs runtime components of Visual C++ Libraries required to run applications developed with Visual C++ 2010 SP1 on a computer that does not have Visual C++ 2010 SP1 installed. more info...
More Microsoft .NET Framework 4.8.3928 The Microsoft .NET Framework 4 Client Profile redistributable package installs the .NET Framework runtime and associated files that are required to run most client applications.The .NET Framework is Microsoft's comprehensive and consistent … more info...
More Microsoft Silverlight 5.1.50918.0 Silverlight is essentially nothing more than Microsoft's vision of a cross-browser, cross-platform plug-in designed to be the source of rich online user experiences and to dislodge Flash from its current dominant position on the market. more info...
More Microsoft OneDrive 20.169.0823.0008 Store any file on your free OneDrive (fromer SkyDrive) and it's automatically available from your phone and computers—no syncing or cables needed. more info...
More Microsoft Edge 87.0.664.60
More Microsoft Visual C++ 2015 Redistributable Package 14.28.29334
More Microsoft SQL Server Compact Edition 3.1.0000 SQL Server Compact 3.5 is a free, easy-to-use embedded database engine that lets developers build robust Windows Desktop and mobile applications that run on all Windows platforms including Windows XP, Vista, Pocket PC, and Smartphone. more info...
More Windows Live Essentials 16.4.3528.0331 Windows Live Essentials (previously Windows Live Installer) is a suite of freeware applications by Microsoft which aims to offer integrated and bundled e-mail, instant messaging, photo-sharing, blog publishing, security services and other … more info...
 Descriptions containing microsoft windows sdk 8.1
More Realtek High Definition Audio Driver 6.0.9030.1REALTEK Semiconductor Corp. - 168.6MB - Freeware - 
 Audio chipsets from Realtek are used in motherboards from many different manufacturers. If you have such a motherboard, you can use the drivers provided by Realtek. more info...
More Microsoft Visual C++ 2010 Redistributable 12.0.30501 The Microsoft Visual C++ 2010 SP1 Redistributable Package installs runtime components of Visual C++ Libraries required to run applications developed with Visual C++ 2010 SP1 on a computer that does not have Visual C++ 2010 SP1 installed. more info...
More Microsoft Visual C++ 2008 Redistributable 11.0.61030.0 The Microsoft Visual C++ 2008 Redistributable Package installs runtime components of Visual C++ Libraries required to run applications developed with Visual C++ on a computer that does not have Visual C++ 2008 installed. more info...
More Microsoft Silverlight 5.1.50918.0 Silverlight is essentially nothing more than Microsoft's vision of a cross-browser, cross-platform plug-in designed to be the source of rich online user experiences and to dislodge Flash from its current dominant position on the market. more info...
More Microsoft .NET Framework 4.8.3928 The Microsoft .NET Framework 4 Client Profile redistributable package installs the .NET Framework runtime and associated files that are required to run most client applications.The .NET Framework is Microsoft's comprehensive and consistent … more info...
More Windows Live Essentials 16.4.3528.0331 Windows Live Essentials (previously Windows Live Installer) is a suite of freeware applications by Microsoft which aims to offer integrated and bundled e-mail, instant messaging, photo-sharing, blog publishing, security services and other … more info...
More Microsoft SQL Server Compact Edition 3.1.0000 SQL Server Compact 3.5 is a free, easy-to-use embedded database engine that lets developers build robust Windows Desktop and mobile applications that run on all Windows platforms including Windows XP, Vista, Pocket PC, and Smartphone. more info...
More Microsoft Visual C++ 2005 ATL Update kb973923 8.0.50727.4053 A security issue has been identified that could allow an attacker to compromise your Windows-based system with Microsoft Visual C++ 2005 Redistributable Package Service Pack 1 and gain complete control over it. more info...
More Intel Processor Graphics 27.20.100.7989 Intel X3000 Chipset incorporates key features available in previous Intel Graphics versions like Dynamic Video Memory Technology (DVMT) as well as hardware acceleration for 3D graphics that utilize Microsoft DirectX* 9.0C and OpenGL* 1.5X. more info...
More Adobe Flash Player ActiveX 33.0.0.413 Adobe Flash Player ActiveX enables the display of multimedia and interactive content within the Internet Explorer web browser. more info...
 Additional titles containing microsoft windows sdk 8.1
More Microsoft Visual C++ 2010 Redistributable 12.0.30501 The Microsoft Visual C++ 2010 SP1 Redistributable Package installs runtime components of Visual C++ Libraries required to run applications developed with Visual C++ 2010 SP1 on a computer that does not have Visual C++ 2010 SP1 installed. more info...
More Microsoft Visual C++ 2008 Redistributable 11.0.61030.0 The Microsoft Visual C++ 2008 Redistributable Package installs runtime components of Visual C++ Libraries required to run applications developed with Visual C++ on a computer that does not have Visual C++ 2008 installed. more info...
More Microsoft Edge 87.0.664.60
More Microsoft OneDrive 20.169.0823.0008 Store any file on your free OneDrive (fromer SkyDrive) and it's automatically available from your phone and computers—no syncing or cables needed. more info...
More Microsoft Visual C++ 2015 Redistributable Package 14.28.29334
Most recent searches

» edge 87.0.664.60
» aba wisp net video
» labelmark 5 как активасиа
» скачать secret.net
» apple 软件更新
» jvm 1.6 download
» usbovgauvc webcam
» voice mod xbox download
» ser player
» 虏丿锁 上
» itunes 最新バージョン 12.11.10.26
» adobe flash activex 32 download
» cyclo installeren
» lingua land yeni versiyon download
» soundforge 4.5
» cakewalk pro 9 free
» creation master beta
» download naro ai photo tagger
» amd catalyst download driver
» drivecrypt ダウンロード
-->SignTool is a command-line tool that digitally signs files, verifies the signatures in files, and timestamps files. For information about why signing files is important, see Introduction to Code Signing. The tool is installed in the Bin folder of the Microsoft Windows Software Development Kit (SDK) installation path.
SignTool is available as part of the Windows SDK, which you can download from https://developer.microsoft.com/windows/downloads/windows-10-sdk/.
Note
The Windows 10 SDK, Windows 10 HLK, Windows 10 WDK and Windows 10 ADK builds 20236 and above will now require specifying the digest algorithm. The SignTool sign command requires the /fd file digest algorithm and the /td timestamp digest algorithm option to be specified during signing and timestamping, respectively. A warning (error code 0, initially) will be thrown if /fd is not specified during signing and if /td is not specified during timestamping. In later versions of SignTool, the warning will become an error. SHA256 is recommended and considered to be more secure than SHA1 by the industry.
SyntaxParametersArgumentDescription
commandOne of four commands (catdb, sign, Timestamp, or Verify) that specifies an operation to perform on a file. For a description of each command, see the next table.
optionsAn option that modifies a command. In addition to the global /q and /v options, each command supports a unique set of options.
file_nameThe path to a file to sign.
The following commands are supported by SignTool.
CommandDescription
CatdbAdds a catalog file to, or removes it from, a catalog database. Catalog databases are used for automatic lookup of catalog files and are identified by GUID. For a list of the options supported by the catdb command, see catdb Command Options.
SignDigitally signs files. Digital signatures protect files from tampering, and enable users to verify the signer based on a signing certificate. For a list of the options supported by the sign command, see sign Command Options.
TimestampTime-stamps files. For a list of the options supported by the TimeStamp command, see TimeStamp Command Options.
VerifyVerifies the digital signature of files by determining whether the signing certificate was issued by a trusted authority, whether the signing certificate has been revoked, and, optionally, whether the signing certificate is valid for a specific policy. For a list of the options supported by the Verify command, see Verify Command Options.
The following options apply to all Sign Tool commands.

Argument	Description
`command`	One of four commands (`catdb`, `sign`, `Timestamp`, or `Verify`) that specifies an operation to perform on a file. For a description of each command, see the next table.
`options`	An option that modifies a command. In addition to the global `/q` and `/v` options, each command supports a unique set of options.
`file_name`	The path to a file to sign.

Command	Description
`Catdb`	Adds a catalog file to, or removes it from, a catalog database. Catalog databases are used for automatic lookup of catalog files and are identified by GUID. For a list of the options supported by the `catdb` command, see catdb Command Options.
`Sign`	Digitally signs files. Digital signatures protect files from tampering, and enable users to verify the signer based on a signing certificate. For a list of the options supported by the `sign` command, see sign Command Options.
`Timestamp`	Time-stamps files. For a list of the options supported by the `TimeStamp` command, see TimeStamp Command Options.
`Verify`	Verifies the digital signature of files by determining whether the signing certificate was issued by a trusted authority, whether the signing certificate has been revoked, and, optionally, whether the signing certificate is valid for a specific policy. For a list of the options supported by the `Verify` command, see Verify Command Options.

» edge 87.0.664.60
» aba wisp net video
» labelmark 5 как активасиа
» скачать secret.net
» apple 软件更新
» jvm 1.6 download
» usbovgauvc webcam
» voice mod xbox download
» ser player
» 虏丿锁 上
» itunes 最新バージョン 12.11.10.26
» adobe flash activex 32 download
» cyclo installeren
» lingua land yeni versiyon download
» soundforge 4.5
» cakewalk pro 9 free
» creation master beta
» download naro ai photo tagger
» amd catalyst download driver
» drivecrypt ダウンロード
-->SignTool is a command-line tool that digitally signs files, verifies the signatures in files, and timestamps files. For information about why signing files is important, see Introduction to Code Signing. The tool is installed in the Bin folder of the Microsoft Windows Software Development Kit (SDK) installation path.
SignTool is available as part of the Windows SDK, which you can download from https://developer.microsoft.com/windows/downloads/windows-10-sdk/.
Note
The Windows 10 SDK, Windows 10 HLK, Windows 10 WDK and Windows 10 ADK builds 20236 and above will now require specifying the digest algorithm. The SignTool sign command requires the /fd file digest algorithm and the /td timestamp digest algorithm option to be specified during signing and timestamping, respectively. A warning (error code 0, initially) will be thrown if /fd is not specified during signing and if /td is not specified during timestamping. In later versions of SignTool, the warning will become an error. SHA256 is recommended and considered to be more secure than SHA1 by the industry.
SyntaxParametersArgumentDescription
commandOne of four commands (catdb, sign, Timestamp, or Verify) that specifies an operation to perform on a file. For a description of each command, see the next table.
optionsAn option that modifies a command. In addition to the global /q and /v options, each command supports a unique set of options.
file_nameThe path to a file to sign.
The following commands are supported by SignTool.
CommandDescription
CatdbAdds a catalog file to, or removes it from, a catalog database. Catalog databases are used for automatic lookup of catalog files and are identified by GUID. For a list of the options supported by the catdb command, see catdb Command Options.
SignDigitally signs files. Digital signatures protect files from tampering, and enable users to verify the signer based on a signing certificate. For a list of the options supported by the sign command, see sign Command Options.
TimestampTime-stamps files. For a list of the options supported by the TimeStamp command, see TimeStamp Command Options.
VerifyVerifies the digital signature of files by determining whether the signing certificate was issued by a trusted authority, whether the signing certificate has been revoked, and, optionally, whether the signing certificate is valid for a specific policy. For a list of the options supported by the Verify command, see Verify Command Options.
The following options apply to all Sign Tool commands.
Global optionDescription
/qDisplays no output if the command runs successfully, and displays minimal output if the command fails.
/vDisplays verbose output regardless of whether the command runs successfully or fails, and displays warning messages.
/debugDisplays debugging information.
Catdb command optionsThe following table lists the options that can be used with the Catdb command.
Catdb optionDescription
/dSpecifies that the default catalog database be updated. If neither the /d nor /g option is used, SignTool updates the system component and driver database.
/gGUIDSpecifies that the catalog database identified by the GUID be updated.
/rRemoves the specified catalog from the catalog database. If this option is not specified, SignTool will add the specified catalog to the catalog database.
/uSpecifies that a unique name be automatically generated for the added catalog files. If necessary, the catalog files are renamed to prevent name conflicts with existing catalog files. If this option is not specified, SignTool overwrites any existing catalog that has the same name as the catalog being added.
Note
Catalog databases are used for automatic lookup of catalog files.
Sign command optionsThe following table lists the options that can be used with the sign command.
Sign command optionDescription
/aAutomatically selects the best signing certificate. Sign Tool will find all valid certificates that satisfy all specified conditions and select the one that is valid for the longest time. If this option is not present, Sign Tool expects to find only one valid signing certificate.
/acfileAdds an additional certificate from file to the signature block.
/asAppends this signature. If no primary signature is present, this signature is made the primary signature instead.
/cCertTemplateNameSpecifies the Certificate Template Name (a Microsoft extension) for the signing certificate.
/cspCSPNameSpecifies the cryptographic service provider (CSP) that contains the private key container.
/dDescSpecifies a description of the signed content.
/dgPathGenerates the digest to be signed and the unsigned PKCS7 files. The output digest and PKCS7 files will be: PathFileName.dig and PathFileName.p7u. To output an additional XML file, see /dxml.
/diPathCreates the signature by ingesting the signed digest to the unsigned PKCS7 file. The input signed digest and unsigned PKCS7 files should be: PathFileName.dig.signed and PathFileName.p7u.
/dlibDLLSpecifies the DLL implementing the AuthenticodeDigestSign function to sign the digest with. This option is equivalent to using SignTool separately with the /dg, /ds, and /di switches, except this option invokes all three as one atomic operation.
/dmdfFilenameWhen used with the /dg option, passes the file's contents to the AuthenticodeDigestSign function without modification.
/dsSigns the digest only. The input file should be the digest generated by the /dg option. The output file will be: File.signed.
/duURLSpecifies a Uniform Resource Locator (URL) for the expanded description of the signed content.
/dxmlWhen used with the /dg option, produces an XML file. The output file will be: PathFileName.dig.xml.
/fSignCertFileSpecifies the signing certificate in a file. If the file is in Personal Information Exchange (PFX) format and protected by a password, use the /p option to specify the password. If the file does not contain private keys, use the /csp and /kc options to specify the CSP and private key container name.
/fdalgSpecifies the file digest algorithm to use for creating file signatures. 
Note: A warning is generated if /fd switch is not provided while signing. The default alg is SHA1 but SHA256 is recommended.
/fdcertHashSpecifying the string certHash will default to the algorithm used on the signing certificate. 
Note: Only available in Windows 10 kit builds 20236 and greater.
/iIssuerNameSpecifies the name of the issuer of the signing certificate. This value can be a substring of the entire issuer name.
/kcPrivKeyContainerNameSpecifies the private key container name.
/nSubjectNameSpecifies the name of the subject of the signing certificate. This value can be a substring of the entire subject name.
/nphIf supported, suppresses page hashes for executable files. The default is determined by the SIGNTOOL_PAGE_HASHES environment variable and by the wintrust.dll version. This option is ignored for non-PE files.
/pPasswordSpecifies the password to use when opening a PFX file. (Use the /f option to specify a PFX file.)
/p7PathSpecifies that a Public Key Cryptography Standards (PKCS) #7 file is produced for each specified content file. PKCS #7 files are named pathfilename.p7.
/p7ceValueSpecifies options for the signed PKCS #7 content. Set Value to 'Embedded' to embed the signed content in the PKCS #7 file, or to 'DetachedSignedData' to produce the signed data portion of a detached PKCS #7 file. If the /p7ce option is not used, the signed content is embedded by default.
/p7coSpecifies the object identifier (OID) that identifies the signed PKCS #7 content.
/phIf supported, generates page hashes for executable files.
/rRootSubjectNameSpecifies the name of the subject of the root certificate that the signing certificate must chain to. This value may be a substring of the entire subject name of the root certificate.
/sStoreNameSpecifies the store to open when searching for the certificate. If this option is not specified, the My store is opened.
/sha1HashSpecifies the SHA1 hash of the signing certificate. The SHA1 hash is commonly specified when multiple certificates satisfy the criteria specified by the remaining switches.
/smSpecifies that a machine store, instead of a user store, is used.
/tURLSpecifies the URL of the time stamp server. If this option (or /tr) is not present, the signed file will not be time stamped. A warning is generated if time stamping fails. This option cannot be used with the /tr option.
/tdalgUsed with the /tr option to request a digest algorithm used by the RFC 3161 time stamp server. 
Note: A warning is generated if /td switch is not provided while timestamping. The default alg is SHA1 but SHA256 is recommended. 
 The /td switch must be declared after the /tr switch, not before. If the /td switch is declared before the /tr switch, the timestamp that is returned is from an SHA1 algorithm instead of the intended SHA256 algorithm.
/trURLSpecifies the URL of the RFC 3161 time stamp server. If this option (or /t) is not present, the signed file will not be time stamped. A warning is generated if time stamping fails. This option cannot be used with the /t option.
/uUsageSpecifies the enhanced key usage (EKU) that must be present in the signing certificate. The usage value can be specified by OID or string. The default usage is 'Code Signing' (1.3.6.1.5.5.7.3.3).
/uwSpecifies usage of 'Windows System Component Verification' (1.3.6.1.4.1.311.10.3.6).
For usage examples, see Using SignTool to Sign a File.
TimeStamp command optionsThe following table lists the options that can be used with the TimeStamp command.
TimeStamp optionDescription
/p7Time stamps PKCS #7 files.
/tURLSpecifies the URL of the time stamp server. The file being time stamped must have previously been signed. Either the /t or the /tr option is required.
/tdalgUsed with the /tr option to request a digest algorithm used by the RFC 3161 time stamp server. 
Note: A warning is generated if /td switch is not provided while timestamping. The default alg is SHA1 but SHA256 is recommended. 
 The /td switch must be declared after the /tr switch, not before. If the /td switch is declared before the /tr switch, the timestamp that is returned is from an SHA1 algorithm instead of the intended SHA256 algorithm.
/tpindexTime stamps the signature at index.
/trURLSpecifies the URL of the RFC 3161 time stamp server. The file being time stamped must have previously been signed. Either the /tr or the /t option is required.
Verify command optionsVerify optionDescription
/aSpecifies that all methods can be used to verify the file. First, the catalog databases are searched to determine whether the file is signed in a catalog. If the file is not signed in any catalog, SignTool attempts to verify the file's embedded signature. This option is recommended when verifying files that may or may not be signed in a catalog. Examples of files that may or may not be signed include Windows files or drivers.
/adFinds the catalog by using the default catalog database.
/allVerifies all signatures in a file with multiple signatures.
/asFinds the catalog by using the system component (driver) catalog database.
/agCatDBGUIDFinds the catalog in the catalog database identified by the GUID.
/cCatFileSpecifies the catalog file by name.
/dPrint the description and description URL.
Windows Vista and earlier: This flag is not supported.
/dsIndexVerifies the signature at a certain position.
/hash{SHA1|SHA256}Specifies an optional hash algorithm to use when searching for a file in a catalog.
/kpPerforms the verification by using the x64 kernel-mode driver signing policy.
/msUses multiple verification semantics. This is the default behavior of a WinVerifyTrust call.
/oVersionVerifies the file by operating system version. The version parameter is of the form:
PlatformID**:VerMajor.VerMinor.**BuildNumber
 The use of the /o switch is recommended. If /o is not specified SignTool may return unexpected results. For example, if you do not include the /o switch, then system catalogs that validate correctly on an older OS may not validate correctly on a newer OS.
/p7Verify PKCS #7 files. No existing policies are used for PKCS #7 validation. The signature is checked and a chain is built for the signing certificate.
/paSpecifies that the Default Authentication Verification Policy is used. If the /pa option is not specified, SignTool uses the Windows Driver Verification Policy. This option cannot be used with the catdb options.
/pgPolicyGUIDSpecifies a verification policy by GUID. The GUID corresponds to the ActionID of the verification policy. This option cannot be used with the catdb options.
/phPrint and verify page hash values.
Windows Vista and earlier: This flag is not supported.
/rRootSubjectNameSpecifies the name of the subject of the root certificate that the signing certificate must chain to. This value can be a substring of the entire subject name of the root certificate.
/twSpecifies that a warning is generated if the signature is not time stamped.
The SignTool verify command determines whether the signing certificate was issued by a trusted authority, whether the signing certificate has been revoked, and, optionally, whether the signing certificate is valid for a specific policy.
The SignTool verify command will output the embedded signature status unless an option is specified to search a catalog (/a, /ad, /as, /ag, /c).
Return valueSign Tool returns one of the following exit codes when it terminates.
Exit codeDescription
0Execution was successful.
1Execution has failed.
2Execution has completed with warnings.
ExamplesThe following command adds the catalog file MyCatalogFileName.cat to the system component and driver database. The /u option generates a unique name if necessary to prevent replacing an existing catalog file named MyCatalogFileName.cat.
The following command signs a file automatically by using the best certificate.
The following command digitally signs a file by using a certificate stored in a password-protected PFX file.
The following command digitally signs and time-stamps a file. The certificate used to sign the file is stored in a PFX file.
The following command signs a file by using a certificate located in the My store that has a subject name of My Company Certificate.
The following command signs an ActiveX control and provides information that is displayed by Internet Explorer when the user is prompted to install the control.
The following command time-stamps a file that has already been digitally signed.
The following command time-stamps a file using an RFC 3161 timestamp server.
The following command verifies that a file has been signed.
Windows Sdk 8.1 Download MsdnThe following command verifies a system file that may be signed in a catalog.
Windows Sdk 8.1 DownloadThe following command verifies a system file that is signed in a catalog named MyCatalog.cat.

Sign command option	Description
`/a`	Automatically selects the best signing certificate. Sign Tool will find all valid certificates that satisfy all specified conditions and select the one that is valid for the longest time. If this option is not present, Sign Tool expects to find only one valid signing certificate.
`/ac`file	Adds an additional certificate from file to the signature block.
`/as`	Appends this signature. If no primary signature is present, this signature is made the primary signature instead.
`/c`CertTemplateName	Specifies the Certificate Template Name (a Microsoft extension) for the signing certificate.
`/csp`CSPName	Specifies the cryptographic service provider (CSP) that contains the private key container.
`/d`Desc	Specifies a description of the signed content.
`/dg`Path	Generates the digest to be signed and the unsigned PKCS7 files. The output digest and PKCS7 files will be: PathFileName.dig and PathFileName.p7u. To output an additional XML file, see /dxml.
`/di`Path	Creates the signature by ingesting the signed digest to the unsigned PKCS7 file. The input signed digest and unsigned PKCS7 files should be: PathFileName.dig.signed and PathFileName.p7u.
`/dlib`DLL	Specifies the DLL implementing the `AuthenticodeDigestSign` function to sign the digest with. This option is equivalent to using SignTool separately with the /dg, /ds, and /di switches, except this option invokes all three as one atomic operation.
`/dmdf`Filename	When used with the /dg option, passes the file's contents to the `AuthenticodeDigestSign` function without modification.
`/ds`	Signs the digest only. The input file should be the digest generated by the /dg option. The output file will be: File.signed.
`/du`URL	Specifies a Uniform Resource Locator (URL) for the expanded description of the signed content.
`/dxml`	When used with the /dg option, produces an XML file. The output file will be: PathFileName.dig.xml.
`/f`SignCertFile	Specifies the signing certificate in a file. If the file is in Personal Information Exchange (PFX) format and protected by a password, use the `/p` option to specify the password. If the file does not contain private keys, use the `/csp` and `/kc` options to specify the CSP and private key container name.
`/fd`alg	Specifies the file digest algorithm to use for creating file signatures. Note: A warning is generated if /fd switch is not provided while signing. The default alg is SHA1 but SHA256 is recommended.
`/fd`certHash	Specifying the string certHash will default to the algorithm used on the signing certificate. Note: Only available in Windows 10 kit builds 20236 and greater.
`/i`IssuerName	Specifies the name of the issuer of the signing certificate. This value can be a substring of the entire issuer name.
`/kc`PrivKeyContainerName	Specifies the private key container name.
`/n`SubjectName	Specifies the name of the subject of the signing certificate. This value can be a substring of the entire subject name.
`/nph`	If supported, suppresses page hashes for executable files. The default is determined by the SIGNTOOL_PAGE_HASHES environment variable and by the wintrust.dll version. This option is ignored for non-PE files.
`/p`Password	Specifies the password to use when opening a PFX file. (Use the `/f` option to specify a PFX file.)
`/p7`Path	Specifies that a Public Key Cryptography Standards (PKCS) #7 file is produced for each specified content file. PKCS #7 files are named pathfilename.p7.
`/p7ce`Value	Specifies options for the signed PKCS #7 content. Set Value to 'Embedded' to embed the signed content in the PKCS #7 file, or to 'DetachedSignedData' to produce the signed data portion of a detached PKCS #7 file. If the `/p7ce` option is not used, the signed content is embedded by default.
`/p7co`	Specifies the object identifier (OID) that identifies the signed PKCS #7 content.
`/ph`	If supported, generates page hashes for executable files.
`/r`RootSubjectName	Specifies the name of the subject of the root certificate that the signing certificate must chain to. This value may be a substring of the entire subject name of the root certificate.
`/s`StoreName	Specifies the store to open when searching for the certificate. If this option is not specified, the `My` store is opened.
`/sha1`Hash	Specifies the SHA1 hash of the signing certificate. The SHA1 hash is commonly specified when multiple certificates satisfy the criteria specified by the remaining switches.
`/sm`	Specifies that a machine store, instead of a user store, is used.
`/t`URL	Specifies the URL of the time stamp server. If this option (or `/tr`) is not present, the signed file will not be time stamped. A warning is generated if time stamping fails. This option cannot be used with the `/tr` option.
`/td`alg	Used with the `/tr` option to request a digest algorithm used by the RFC 3161 time stamp server. Note: A warning is generated if /td switch is not provided while timestamping. The default alg is SHA1 but SHA256 is recommended. The /td switch must be declared after the /tr switch, not before. If the /td switch is declared before the /tr switch, the timestamp that is returned is from an SHA1 algorithm instead of the intended SHA256 algorithm.
`/tr`URL	Specifies the URL of the RFC 3161 time stamp server. If this option (or `/t`) is not present, the signed file will not be time stamped. A warning is generated if time stamping fails. This option cannot be used with the `/t` option.
`/u`Usage	Specifies the enhanced key usage (EKU) that must be present in the signing certificate. The usage value can be specified by OID or string. The default usage is 'Code Signing' (1.3.6.1.5.5.7.3.3).
`/uw`	Specifies usage of 'Windows System Component Verification' (1.3.6.1.4.1.311.10.3.6).

TimeStamp option	Description
`/p7`	Time stamps PKCS #7 files.
`/t`URL	Specifies the URL of the time stamp server. The file being time stamped must have previously been signed. Either the `/t` or the `/tr` option is required.
`/td`alg	Used with the `/tr` option to request a digest algorithm used by the RFC 3161 time stamp server. Note: A warning is generated if /td switch is not provided while timestamping. The default alg is SHA1 but SHA256 is recommended. The /td switch must be declared after the /tr switch, not before. If the /td switch is declared before the /tr switch, the timestamp that is returned is from an SHA1 algorithm instead of the intended SHA256 algorithm.
`/tp`index	Time stamps the signature at index.
`/tr`URL	Specifies the URL of the RFC 3161 time stamp server. The file being time stamped must have previously been signed. Either the `/tr` or the `/t` option is required.

Verify option	Description
/a	Specifies that all methods can be used to verify the file. First, the catalog databases are searched to determine whether the file is signed in a catalog. If the file is not signed in any catalog, SignTool attempts to verify the file's embedded signature. This option is recommended when verifying files that may or may not be signed in a catalog. Examples of files that may or may not be signed include Windows files or drivers.
/ad	Finds the catalog by using the default catalog database.
/all	Verifies all signatures in a file with multiple signatures.
/as	Finds the catalog by using the system component (driver) catalog database.
/agCatDBGUID	Finds the catalog in the catalog database identified by the GUID.
/cCatFile	Specifies the catalog file by name.
/d	Print the description and description URL. Windows Vista and earlier: This flag is not supported.
/dsIndex	Verifies the signature at a certain position.
/hash{SHA1\|SHA256}	Specifies an optional hash algorithm to use when searching for a file in a catalog.
/kp	Performs the verification by using the x64 kernel-mode driver signing policy.
/ms	Uses multiple verification semantics. This is the default behavior of a WinVerifyTrust call.
/oVersion	Verifies the file by operating system version. The version parameter is of the form: PlatformID:VerMajor.VerMinor.BuildNumber The use of the /o switch is recommended. If /o is not specified SignTool may return unexpected results. For example, if you do not include the /o switch, then system catalogs that validate correctly on an older OS may not validate correctly on a newer OS.
/p7	Verify PKCS #7 files. No existing policies are used for PKCS #7 validation. The signature is checked and a chain is built for the signing certificate.
/pa	Specifies that the Default Authentication Verification Policy is used. If the /pa option is not specified, SignTool uses the Windows Driver Verification Policy. This option cannot be used with the catdb options.
/pgPolicyGUID	Specifies a verification policy by GUID. The GUID corresponds to the ActionID of the verification policy. This option cannot be used with the catdb options.
/ph	Print and verify page hash values. Windows Vista and earlier: This flag is not supported.
/rRootSubjectName	Specifies the name of the subject of the root certificate that the signing certificate must chain to. This value can be a substring of the entire subject name of the root certificate.
/tw	Specifies that a warning is generated if the signature is not time stamped.

Global option	Description
/q	Displays no output if the command runs successfully, and displays minimal output if the command fails.
/v	Displays verbose output regardless of whether the command runs successfully or fails, and displays warning messages.
/debug	Displays debugging information.

Catdb option	Description
/d	Specifies that the default catalog database be updated. If neither the /d nor /g option is used, SignTool updates the system component and driver database.
/gGUID	Specifies that the catalog database identified by the GUID be updated.
/r	Removes the specified catalog from the catalog database. If this option is not specified, SignTool will add the specified catalog to the catalog database.
/u	Specifies that a unique name be automatically generated for the added catalog files. If necessary, the catalog files are renamed to prevent name conflicts with existing catalog files. If this option is not specified, SignTool overwrites any existing catalog that has the same name as the catalog being added.

Exit code	Description
0	Execution was successful.
1	Execution has failed.
2	Execution has completed with warnings.