Skip to content

Code sign

Jorgen Lundman edited this page Oct 12, 2025 · 1 revision

Code sign (EV certificate)

This is mostly notes to myself.

Run

# ./contrib/windows/attestation.sh

This will copy binaries from build area (out/build/x64-Debug/*) based on contents of ./contrib/windows/openzfs.ddf (openzfs_arm64.ddf) This produces disk1/OpenZFS.cab

Upload disk1/OpenZFS.cab to Microsoft "New Hardware" code sign page, and do the code-sign steps, wait, and eventually download the codesigned package, for example:

Signed_1152921505699964777.zip

Run:

# ./contrib/windows/attestation.sh Signed_1152921505699964777.zip

Which will unzip the contents back into the build area.

Do not rebuild!

Run Inno Setup Installer, and produce a new Installer.

Done.

Clone this wiki locally