Adding Certificates to the Code Integrity Store (Compact 2013)
3/28/2014
LVMOD uses the Code Integrity certificate store for signature validation of signed binaries. During verification, LVMOD checks to see if the certificate that the binary is signed with correctly chains to a certificate in the store.
To add intermediate or root certificates to the Code Integrity certificate store
Place all the certificates together in a file named Ciroots.p7b.
Put the Ciroots.p7b file in the FILES folder of the project or platform for the OS design.
The build system automatically picks up the Ciroots.p7b file during the Build Release Directory (Buildrel.bat) and Make Binary Image (Makimg.exe) phases of the build, and replaces the empty Ciroots.p7b file that gets shipped by default with the OS.
See Also
Tasks
Signing Binaries
Using Test Certificates During Development
Other Resources
Security Loader
Build Release Directory Tool (Buildrel.bat)
Make Binary Image Tool (Makeimg.exe)