Verifying Signed Scripts

Signed text files contain certificate information as a block comment at the end of the script, which you can view with any text editor. To verify the certificate, you can use the AdskSignTool.exe executable, available in the 3ds Max install directory. The -verify command verifies that the certificate is valid and has not been revoked, and that the file has not been changed since it was signed. The syntax to use this tool to verify a script’s digital signature is:

AdskSignTool.exe -verify -marker "--" <maxscript_file>

Where the "marker" argument is required to pass in the comment marker used in the file. For MAXScript files this is "--" and for resource files it is ";".

For example, to verify the Brush Presets Macroscript, use the command:

> .\AdskSignTool.exe -verify -marker "--" .\MacroScripts\Macro_BrushPresets.mcr
The file '.\MacroScripts\Macro_BrushPresets.mcr' has a valid digital signature
 Certificate information
        Subject : Autodesk, Inc.
        Issuer : Symantec Class 3 SHA256 Code Signing CA - G2
        Serial Number : 0e5d2be5a71b96c37a63e65954814418
        Expiration : Saturday, August 4, 2018 6:59:59 PM

To run the verification on all MAXScript files in a directory tree, here is a suggested batch file:

rem Script tool to verify in batch the validity of digital signature of maxscript files

@echo off
for /r %%A IN (*.ms *.mxs *.mcr) DO (      
   @"AdskSignTool.exe" -verify -marker "--" "%%A"
   )
   
for /r %%A IN (*.ms.res *.mxs.res *.mcr.res) DO (      
   @"AdskSignTool.exe" -verify -marker ";" "%%A"
   )