SignTool unexepected internal error

▲
6
▼

I am running SignTool with the following command: signtool sign /f keyfile.pfx /p mypassword pathToMsiFile.msi and i get the following error:

SignTool Error: An unexpected internal error has occurred. Error information: "Error: Store::ImportCertObject() failed." (-2146893792/0x80090020)

It worked just until a day ago, and i have no idea what might have changed...

Any ideas would be great, thanks!

I managed to fix it. Apperantly the user was corrupted.

after fixing the user using this KB from microsoft everything became right again.

authenticode
signtool
asked on Stack Overflow Jul 19, 2011 by ravyoli • edited Jul 19, 2011 by ravyoli

5 Answers

▲
3
▼

I had the same issue but only when I'm trying to sign it under IIS/PHP script. When I run PHP from the console it's OK. And here there were no issue with account. Only one thing helped me - changing Anonymous Authentication Credentials for Site/application from Specific USER to Application pool identity.

answered on Stack Overflow Nov 1, 2012 by DevAnimal • edited Nov 1, 2012 by David Cain
▲
2
▼

I managed to fix it. Apperantly the user was corrupted.

after fixing the user using this KB from microsoft everything became right again.

answered on Stack Overflow Jul 26, 2011 by ravyoli • edited May 2, 2019 by StayOnTarget
▲
1
▼

None of the suggested answers worked for me using Windows 2008 R2 and IIS 7.5. What did work was to change a setting for the application pool. Here is what works on IIS 7.5.

  1. Select your application pool and click Advanced Settings
  2. Under Process Model, change Identity to LocalSystem

This is the only thing that worked for me, hopefully it will help others down the road.

answered on Stack Overflow Jan 17, 2013 by tool4scs
▲
1
▼

I'm not sure if setting your Application Pool to run as the LocalSystem is a good idea from the security standpoint. One way to fix this error is to enable Load User Profile in Advanced settings for the Application Pool. Don't ask how long it took me to find it out...

Here's more details.

answered on Stack Overflow Oct 8, 2013 by c00000fd • edited May 23, 2017 by Community
▲
0
▼

I was also experiencing this error within a web application which was using an IIS web application pool with domain credentials, but the "Load User Profile" was set to false. Once I set it to true, signtool.exe worked without issues.

answered on Stack Overflow May 29, 2012 by Rami A.

User contributions licensed under CC BY-SA 3.0