Not related to Jenkins - I'm trying exactly the same thing with an IIS 
server and ran into the same problem. No luck yet.

By the way, the Symantec EV certificate/USB token has a way to enable 
single sign-on. I wonder if Digicert has something like that.

On Thursday, August 27, 2015 at 9:51:29 AM UTC-5, Ed of the Mountain wrote:
>
> When I try to code sign in my Jenkins job I receive a SignTool error:
>
>
> c:\jenkins\workspace\codesign-windows>
>
> signtool sign /t http://timestamp.digicert.com /n "Acme Inc." code.exe 
>
> SignTool Error: No certificates were found that met all the given criteria.
>
>
> I am using a DigiCert Extend Validation ( EV ) USB token that requires the 
> USB token be connected to the build machine.  This works fine when logged on 
> as normal user.
>
>
>    - I am running Jenkins as a Windows service.
>    - Service Log On is set to Local System account.
>    - Service is *allowed to interact with desktop.*
>
>
>
> When I logon as a normal user to the build machine, it works fine.
>
>
> 1 - signtool sign /t http://timestamp.digicert.com /n "Acme Inc." code.exe
>
> 2 - This triggers a pop-up "Token Logon" dialog that requires user interaction
>
> 3 - I have a separate "Token Logon" watcher that finds the WIndows ID and 
> enters password.
>
> 4 - Code is signed automatically
>
>
> C:\jenkins\workspace\codesign-windows>signtool sign /t 
> http://timestamp.digicert
> .com /n "The Charles Machine Works, Inc." token-logon.exe
> Done Adding Additional Store
> Successfully signed: token-logon.exe
>
>
> Any suggestions to try are much appreciated,
>
>
> -Ed
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/565e1177-8016-49d8-99ad-f2d84ae03da0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to