Hi,
I have a Visual C++ 6.0 application and I am reviewing "Unknown Publisher" security warning in IE 6.0 and 7.0 download and installing on Windows XP SP2 and Vista RC 2 computers. How do I add a valid digital signature to my VC++ 6.0 app
Your feedback is appreciated.

Unknown Publisher for Visual C++ 6.0 Application
Álvaro Peñarrubia
Posting a better answer because some people are having problems and I want them to find this post.
If you are signing with a pvk and spc and your pvk file has a password. Follow these steps.
Step one Create a .pfx file:
Command Line:
pvk2pfx -pvk myprivatekey.pvk -pi MyPivateKeyPassword -spc mycredentials.spc -pfx mypfx.pfx -po MyPFXpassword -f
Step two use the pfx file with signtool...
Command Line
signtool sign /f mypfx.pfx /p MyPFXpassword /t ttp://timestamp.verisign.com/scripts/timstamp.dll /v TradeJournal.exe
I actually use the /SHA arg in the signtool too, but probably not required.
Daniel Rieck
You will need a digital cert for codesigning. The signcode.exe is what you will use to sign your code. This can be found in the ActiveX SDK or .net framework. It can be used to sign any assembly.
Here are some good resorces on code signing:\
http://msdn.microsoft.com/library/default.asp url=/library/en-us/dnlong/html/AccProtVista.asp
http://msdn.microsoft.com/library/default.asp url=/library/en-us/dnauth/html/msdn_codewp.asp
http://msdn.microsoft.com/library/default.asp url=/library/en-us/dnauth/html/signfaq.asp
If something isn't wrking for you let us know.