title: Why's My Root Certificate Not Trusted?
body: <p>I have issued myself a Code Signing certificate from a certificate server. I have also issued myself the root certificate from the same certificate server. <strong>The root certificate exists in both the Current User and Local Computer certificate stores within the Trusted Root Certification Authorities folder.</strong> I have <strong>successfully</strong> signed a DLL using the signtool.exe wizard:</p>
  
  <pre><code>"C:\Program Files\Microsoft SDKs\Windows\v6.0A\Bin\signtool.exe" signwizard &lt;MyDLLName&gt;.dll
  </code></pre>
  
  <p>However, when I try to verify my DLL, it fails verification with the following error:</p>
  
  <pre><code>"C:\Program Files\Microsoft SDKs\Windows\v6.0A\Bin\signtool.exe" verify &lt;MyDLLName&gt;.dll
  SignTool Error: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
  SignTool Error: File not valid: &lt;MyDLLName&gt;.dll
  </code></pre>
  
  <p>Why is this happening? I thought having the root certificate in the Trusted Root Certification Authorities folder would verify the DLL.</p>