Visit Microsoft's SDK download page to grab the latest standalone SDK. Even though this is the Windows 10 SDK, you can install it on Windows 7 if you need to.
Its ok to install in C:\Program Files(x86)\Windows Kits\10\
The screenshot below shows the minimal set of features you need to install to do signing: Windows IP over USB (required by SDK for UWP), Windows SDK Signing Tools for Desktop Apps (installs
signtool.exe), and Windows SDK for UWP Managed Apps (installs
certmgr.exe). You can install more if you're doing Windows development.
You can now find
C:\Program Files (x86)\Windows Kits\10\bin\10.0.16299.0\x64 (or a newer version, if one has been released). Previous SDK installations did not include a version number in the path.
Download Windows WDK (Windows Driver Kit)
Go to https://docs.microsoft.com/en-us/windows-hardware/drivers/download-the-wdk and download the latest WDK (not ADK, scroll down!). You don't need to install Visual Studio first even though it looks like a prerequisite. Install into the same location:
This warning is OK.
Half an hour later...WDK is installed!
Now you can check
C:\Program Files (x86)\Windows Kits\10\bin\10.0.16299.0\x86 (or whatever version you installed) to see that you have a new tool called