如何解决Azure Trusted Signing签名Word模板(.dot)失败问题

• 已按文档操作成功用Azure Trusted Signing完成.exe和MSI文件签名，仅Word模板(.dot)文件签名出现异常
• 基于原本地证书签名.dot模板的脚本，已新增/dlib参数指定Azure.CodeSigning.Dlib.dll路径

执行的签名命令 #

"C:\Program Files (x86)\Windows Kits\10\bin\10.0.22621.0\x86\signtool.exe" sign /v /debug /fd SHA256 /tr "http://timestamp.acs.microsoft.com" /td SHA256 /dlib "C:\tools\signinglib\microsoft.trusted.signing.client\1.0.53\bin\x86\Azure.CodeSigning.Dlib.dll" /dmdf "C:\sign-office\signing-metadata.json" "C:\Template.dot"

Trusted Signing返回信息 #

Trusted Signing

Version: 1.0.53

"Metadata": {
  "Endpoint": "https://weu.codesigning.azure.net/",
  "CodeSigningAccountName": "blahblah",
  "CertificateProfileName": "Moreblahblah",
  "ExcludeCredentials": [
    "VisualStudioCredential",
    "VisualStudioCodeCredential",
    "AzurePowerShellCredential",
    "InteractiveBrowserCredential"
  ]
}
Submitting digest for signing...
OperationId 1e21810d-2518-4598-918e-7eeb90d2b4e1: InProgress
Signing completed with status 'Succeeded' in 6.4137774s

问题现象 #

虽然Trusted Signing日志显示签名状态为Succeeded，但signtool返回错误码C0000005，目标.dot文件并未完成签名。

内容的提问来源于stack exchange，提问作者David Watson