How do I verify with SignTool a signature file(p7) created using the DetachedSignedData option with SignTool?

Question

Below is the sign file creation command of SignTool.exe that I used.

signtool sign /n "SubjectOfSigningCertificate" /p7ce DtachedSignedData /fd sha256 / p7co 1.2.840.113549.1.7.2 /p7 "Path" /debug /v "FileDirectory"

If type command like this, a file with the p7 extension will be created in “path”.

This file contains certification information for "FileDirecotry".

What command should I use to verify the file stored in “path” using SignTool?

Answer 1

Hello JY.CHOI,

For verification of the file you can use the next syntax:

signtool verify /v /pa /debug /a "<Path><YourFile.p7>"

You can access the official article for Microsoft SignTool, for syntax and examples here: https://learn.microsoft.com/en-us/windows/win32/seccrypto/signtool

--If the reply is helpful, please Upvote and Accept as answer--