首先要有工具包，包括以下几个软件： makecert.exe 制作cer格式的证书，即X.509证书，同时可以创建私钥 cert2spc.exe 将cer格式证书转换成spc格式证书，即PKCS #7证书 signcode.exe 将证书签署到ocx上去 chktrust.exe 检查签署证书后的ocx是否正确 还有一个certmgr.exe，是管理证书用的。可以从这里面导出root.cer来， 网上很多文章写到这个证书，但是在VC的安装盘中却找不到。其实，没 有也没关系的。这几个软件可以从VC的安装盘中找到。-must first have kits include the following software : makecert.exe production rejects format certificates, X.509 certificates, but can also create private key to managerial cert2spc.exe certificate format conversion spc format certificates, PKCS# 7 certificates to the certificate signed signcode.exe Department chktrust.exe to randomly check up after the signing of a certificate of randomly correct a certmgr.exe there is the management certificate. They can be derived from this root.cer, wrote many articles online this certificate, but in the installation intraday VC can not find. In fact, no also irrelevant. These software can be installed from the VC intraday found.