Network Audit and Documentation, CENTREL Solutions Blog

When you're trying to digitally sign a file using the signtool.exe with a Thales SafeNet token you may see the following error This can occur when the password being passed to signtool is incorrect and if the password for the token has expired. Open the SafeNet Authentication Client, click the advanced settings "cog" icon. Right click the token and select "Log On to Token..." and enter your password. If the password has expired you will be prompted for a new password. The password can be passed in the command line for signtool.exe "D:\build\signtool.exe" sign /f " D:\PathTo\YourCert.cer " /tr http://timestamp.digicert.com /td sha256 /fd sha256 /csp "eToken Base Cryptographic Provider" /k "[{{ YourPassword }}]= containername " %1

When you run Microsoft Edge as administrator by right clicking and selecting "Run as administrator" you find that the browser doesn't have administrator rights and has not elevated. Peforming the same action in Google Chrome does not have the issue. Viewing the process in Task Manager shows that the browser is not running elevated. The issue is caused because Microsoft automatically and silently  de-elevates the process when it's run as a safety precaution.  To prevent this from happening you can use the following parmeter command --do-not-de-elevate