# Signotaur action with label support
**URL:** https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780
**Category:** Discussion
**Tags:** code-signing
**Created:** [April 15, 2026, 11:22am UTC](https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780 "2026-04-15T11:22:38Z")
**Posts on this page:** 13
**Page:** 1
### Author:  [@uraabe](https://www.finalbuilder.com/forums/u/uraabe)
#### Post date: [April 15, 2026, 11:22am UTC](https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780/1 "2026-04-15T11:22:38Z")
Is there a way to use the new _–label_ option supported in the FinalBuilder Signotaur action?
If not, can you add that, please?
---
### Author:  [@uraabe](https://www.finalbuilder.com/forums/u/uraabe)
#### Post date: [April 15, 2026, 11:35am UTC](https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780/2 "2026-04-15T11:35:10Z")
Let me extend that to SHA1 support.
---
### Author:  [@uraabe](https://www.finalbuilder.com/forums/u/uraabe)
#### Post date: [April 15, 2026, 1:51pm UTC](https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780/3 "2026-04-15T13:51:57Z")
… and _Unsupported File Types_…
---
### Author:  [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)
#### Post date: [April 15, 2026, 10:04pm UTC](https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780/4 "2026-04-15T22:04:53Z")
Thanks for the reminder - will get that sorted in the next few days.
---
### Author:  [@uraabe](https://www.finalbuilder.com/forums/u/uraabe)
#### Post date: [April 15, 2026, 10:15pm UTC](https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780/5 "2026-04-15T22:15:46Z")
Meanwhile I make use of _ExtraCmdLineParamsAtEnd_.
---
### Author:  [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)
#### Post date: [April 17, 2026, 12:37am UTC](https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780/6 "2026-04-17T00:37:05Z")
Hi Uwe
This build adds support for Label, SHA1 (Dual signing) and Unsupported file types. We did have to re-organise the ui on the signing action somewhat to make room for the new options.
[https://downloads.finalbuilder.com/downloads/finalbuilder/850/FB850\_3600.exe](https://downloads.finalbuilder.com/downloads/finalbuilder/850/FB850_3600.exe)
An official update will be a few weeks, we are working on re-implementing the sftp actions with a different client library which will take some time to test (basic testing is done, we are testing backwards compatibility at the moment).
---
### Author:  [@uraabe](https://www.finalbuilder.com/forums/u/uraabe)
#### Post date: [April 21, 2026, 8:31am UTC](https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780/7 "2026-04-21T08:31:26Z")
Thanks Vincent for the quick reaction. Here are my findings:
1. While the _Signing Options_ page correctly says “One of Thumbprint or Subject or Label is required”, I wasn’t able to find an edit control to specify a _Label_.
2. Dual-Sign gives an error (see attached FB log excerpt).
[DualSignError.txt](https://www.finalbuilder.com/forums/uploads/short-url/c8YprTLnahthgtH2JwKSqQP4SHS.txt) (3.7 KB)
---
### Author:  [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)
#### Post date: [April 21, 2026, 8:45am UTC](https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780/8 "2026-04-21T08:45:50Z")
Hi Uwe
Looking into it.
---
### Author:  [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)
#### Post date: [April 21, 2026, 8:49am UTC](https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780/9 "2026-04-21T08:49:46Z")
Hi Uwe
For dual signing, I believe you need to enabled the Apend Signature option. I’ll make sure we change the action to do that automatically.
---
### Author:  [@Sparky](https://www.finalbuilder.com/forums/u/Sparky)
#### Post date: [April 21, 2026, 10:55am UTC](https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780/10 "2026-04-21T10:55:36Z")
Hi Uwe,
The error is caused by combining `--sha1` with your ECDSA certificate. Windows refuses to nest a SHA-256 signature on top of an ECDSA+SHA-1 primary signature, which is the `E_INVALIDARG `you’re seeing in the log.
Windows XP / Vista / Windows 7 (pre-SP1) only understand RSA code signing - they have no support for ECDSA certificates at all. So a SHA-1 signature made with your ECC cert can’t be validated on the old Windows versions it’s meant for. You’ll need to use an RSA code-signing certificate or remove `--sha1` and sign with SHA-256 only.
---
### Author:  [@uraabe](https://www.finalbuilder.com/forums/u/uraabe)
#### Post date: [April 21, 2026, 12:55pm UTC](https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780/11 "2026-04-21T12:55:17Z")
Thanks Dave,
I think I’d better drop SHA-1 completely then. It would be nice to have it for a handful of DLLs used on Windows XP, but I can live without them being signed properly. If someone doesn’t trust my binaries for these legacy systems, they can as well trash the while thing completely. It feels like I am the only one still providing support for that anyway.
Sorry for bothering you.
Best regards
Uwe
---
### Author:  [@Sparky](https://www.finalbuilder.com/forums/u/Sparky)
#### Post date: [April 21, 2026, 1:22pm UTC](https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780/12 "2026-04-21T13:22:04Z")
Hi Uwe,
No bother at all - it was a genuinely useful report.
The error message was misleading (“Failed to append primary signature” when it’s actually the secondary one that failed), so I’ve tweaked the wording for the next build and added an up-front warning. That way anyone combining --sha1 with an ECDSA certificate will be informed straight away.
Dropping --sha1 is the right approach for your cert type. And realistically, you’re not losing anything - Windows XP is long gone, Microsoft stopped trusting SHA-1 Authenticode root certificates back in 2020, and even those still using XP have mostly accepted that code signing for those systems isn’t really viable anymore.
---
### Author:  [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)
#### Post date: [April 21, 2026, 10:59pm UTC](https://www.finalbuilder.com/forums/t/signotaur-action-with-label-support/7780/13 "2026-04-21T22:59:35Z")
Hi Uwe
This build has the fix for the missing Label field
[https://downloads.finalbuilder.com/downloads/finalbuilder/850/FB850\_3608.exe](https://downloads.finalbuilder.com/downloads/finalbuilder/850/FB850_3608.exe)