I just bought a code-signing certificate for the first time. I'm successfully signing my code from script/command line using
signtool sign /f <pfx file> /p <password> <exe file>
I noticed that signtool also has a /a option that will "choose the best certificate", which I believe uses any certificates imported into the Windows Certificate Store to select from.
If I double-click my cert, it opens the Certificate Import Wizard.
What are the pros/cons of using the Certificate Store? In particular for an individual developer.
It looks like with the certificate store I do not need to use provide the password for each call. I guess that means the certificate store is linked to my user and uses my login credentials to validate use of the certs?
Thanks, Brett