title: What part of a signed executable/MSI file can I modify so as not to affect its digital signature?
body: <p>Let me explain my dilemma. I have my main software that has an option to install a smaller module of the software by letting a user save its MSI installer and later run it on a remote computer.</p>
  
  <p>That MSI installer is originally digitally signed by my code-signing certificate.</p>
  
  <p>The issue I have is how to pass some minimum data in that MSI that can be generated dynamically from the main app? Stuff like registration name and some minimum software-related parameters that a user chose via the UI.</p>
  
  <p>First I thought to modify the MSI contents dynamically from the app, but that would break the digital signature. (I obviously can't re-sign it since I'm not willing to expose my private key for the digital certificate in that app.)</p>
  
  <p>So at this point, I'm curious, if there's any part of the MSI file that are not affected by the digital signature? I know that file name is not affected, but that won't give me much wiggle room to add my data.</p>