---
title: "Fortanix DSM with 32-Bit SignTool for Signing and Verifying Microsoft Office Macro Files"
slug: "fortanix-dsm-with-32-bit-signtool-for-signing-and-verifying-microsoft-office-macro-files"
updated: 2026-04-01T08:46:55Z
published: 2025-08-13T08:06:22Z
canonical: "support.fortanix.com/fortanix-dsm-with-32-bit-signtool-for-signing-and-verifying-microsoft-office-macro-files"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.fortanix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Fortanix DSM with 32-Bit SignTool for Signing and Verifying Microsoft Office Macro Files

## 1.0 Introduction

This article describes how to integrate Introduction **Fortanix-Data-Security-Manager (DSM)** with 32-bit SignTool for Signing and Verifying Microsoft Office Macro Files.

[SignTool](https://learn.microsoft.com/en-us/dotnet/framework/tools/signtool-exe) is a command-line tool provided by Microsoft as part of the Windows Software Development Kit (SDK). It is used to digitally sign files, including executable files, libraries (DLLs), installer packages, and other types of files on the Windows operating system.

You can use SignTool with the Fortanix DSM CNG Provider. Fortanix DSM CNG Provider makes it easy to securely store sensitive objects/keys required during the sign and verify processes, a native feature provided by Fortanix Key Management Service (KMS) for enterprise-level code-signing capabilities.

## 2.0 Prerequisites

The server or workstation that will be running the SignTool must have the following installed:

- [Download](https://download.fortanix.com/clients/4.19.2244/FortanixKmsClient32-4.19.2244.msi?_gl=1*cpuj5q*_gcl_au*MTk5MjcwNzYwNS4xNzE5MjA1MDI0) and install the 32-bit Fortanix KMS CNG Provider. You need 32-bit CNG to sign and verify the Office macro files.
- [Download](https://developer.microsoft.com/en-us/windows/downloads/windows-10-sdk/) and install the 32-bit Signtool. *For more information, refer to* [*SignTool*](https://learn.microsoft.com/en-us/windows/win32/seccrypto/signtool.)*.*

## 3.0 Signing and Verifying Microsoft Office Macro Files

*Refer to* [*Using Fortanix Data Security Manager with Microsoft CNG Provider and SignTool*](/v1/docs/using-fortanix-data-security-manager-with-microsoft-cng-provider-and-signtool) *for integrating SignTool with CNG Provider.* With this integration, you can sign file types like `.msi` and so on.

To sign Office macro file types, add the following steps to the above integration:

1. Download and install [Microsoft Office Subject Interface Packages (SIPs)](https://www.microsoft.com/en-us/download/details.aspx?id=56617).
2. Download and install [Visual C++ 2010](https://download.microsoft.com/download/C/6/D/C6D0FD4E-9E53-4897-9B91-836EBA2AACD3/vcredist_x86.exe) run time.
3. After installing the above tools, open a command prompt in **Administrator** mode and run the following commands: If successful, you will see a message: **DIIRegister Server in <Your complete file path> succeeded.**

```bash
regsvr32.exe <complete path to msosip.dll>
regsvr32.exe <complete path to msosipx.dll>
```

> [!NOTE]
> NOTE
> 
> The files `msosip.dll` and `msosipx.dll` are available when you install Microsoft Office SIPs.
4. Run the following command to sign the Microsoft Office macro file using SignTool:

```bash
<Your path_to_32_bit_signtool.exe> sign /csp "Fortanix KMS CNG Provider" /kc <private key container name> /fd sha256 /f <signing certificate> MacroBook.xlsm
```

![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Successful Validation.png)

**Figure 1: Successfully signed office macro file**
5. Run the following command to verify if a file is signed:

```bash
<Your path_to_32_bit_Signtool.exe> verify /pa MacroBook.xlsm
```

![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Verify Signing.png)

**Figure 2: Verify the signed office macro file**

Fortanix Data Security Manager (DSM) is the world’s first cloud service secured with Intel® SGX. With Fortanix DSM, you can securely generate, store, and use cryptographic keys and certificates, as well as other secrets such as passwords, API keys, tokens, or any blob of data. Your business-critical applications and containers can integrate with Fortanix DSM using legacy cryptographic interfaces (PKCS#11, CNG, and JCE) or using the native Fortanix DSM RESTful interface.

## Related

- [Fortanix DSM with Microsoft CNG Provider and SignTool](/using-fortanix-dsm-with-microsoft-cng-provider-and-signtool.md)
- [Fortanix DSM with Sectigo CA for Secure Certificate Generation](/fortanix-dsm-with-sectigo-ca-for-secure-certificate-generation.md)
- [Exporting Fortanix DSM Keys to Cloud Providers for BYOK - Alibaba](/exporting-dsm-keys-to-cloud-providers-for-byok-alibaba.md)
- [Microsoft CNG Key Storage Provider](/fortanix-dsm-clients-microsoft-cng-key-storage-provider.md)
- [Getting Started with Fortanix Armor](/fortanix-armor-getting-started.md)