Adding Certificates to the Code Integrity Store (Compact 7)

  • Article

3/12/2014

LVMOD uses the Code Integrity certificate store for signature validation of signed binaries. During verification, LVMOD checks to see if the certificate that the binary is signed with correctly chains to a certificate in the store.

To add intermediate or root certificates to the Code Integrity certificate store

  1. Place all the certificates together in a file named Ciroots.p7b.

  2. Put the Ciroots.p7b file in the FILES folder of the project or platform for the OS design.
    The build system automatically picks up the Ciroots.p7b file during the Build Release Directory (Buildrel.bat) and Make Binary Image (Makimg.exe) phases of the build, and replaces the empty Ciroots.p7b file that gets shipped by default with the OS.

See Also

Tasks

Signing Binaries
Using Test Certificates During Development

Other Resources

Security Loader
Build Release Directory Tool (Buildrel.bat)
Make Binary Image Tool (Makeimg.exe)