Index: /trunk/Config.kmk
===================================================================
--- /trunk/Config.kmk	(revision 85331)
+++ /trunk/Config.kmk	(revision 85332)
@@ -3638,5 +3638,5 @@
 	$(if $(strip $(2)),/d "$(strip $(2))",) \
 	$(3) \
-	$(1) \
+	"$(1)" \
     	$(if-expr "$5" == "",\
 	$(if-expr "$6" == "",$(if-expr "$4" == "2",$$(NLTAB),$(NLTAB)),$6)$(VBOX_SIGNTOOL) \
@@ -3649,5 +3649,5 @@
 	$(if $(strip $(2)),/d "$(strip $(2))",) \
 	$(3) \
-	$(1),)
+	"$(1)",)
    else
     VBOX_SIGN_FILE_FN     = $(VBOX_SIGNTOOL) sign \
@@ -3659,5 +3659,5 @@
 	$(if $(strip $(2)),/d "$(strip $(2))",) \
 	$(3) \
-	$(1)
+	"$(1)"
    endif
   endif
@@ -3676,5 +3676,5 @@
 	$(VBOX_CERTIFICATE_EV_FINGERPRINT_ARGS) \
 	$(VBOX_TSA_SHA2_URL_ARGS) \
-	$(1)
+	"$(1)"
    endif
   endif
@@ -3706,5 +3706,5 @@
   	$(if $(strip $(2)),/d "$(strip $(2))",) \
   	$(3) \
-  	$(1) \
+  	"$(1)" \
   	$(if-expr "$5" == "",\
 	$(if-expr "$4" == "2",$$(NLTAB),$(NLTAB))$(RM) -f -- "$1.ccs" \
@@ -3818,5 +3818,5 @@
 	$(3) \
 	$(VBOX_CERTIFICATE_SUBJECT_NAME_ARGS) \
-	$(1) $(if $(2),--identifier "$(2)",)
+	"$(1)" $(if $(2),--identifier "$(2)",)
   endif
 
@@ -3841,5 +3841,5 @@
 	$(VBOX_CERTIFICATE_SUBJECT_NAME_ARGS) \
 	$(3) \
-	$(1) \
+	"$(1)" \
 	$(if $(2),--identifier "$(2)",)
   endif
@@ -3883,5 +3883,5 @@
 	$(if $(2),--identifier "$(2)",) \
 	$(VBOX_CERTIFICATE_SUBJECT_NAME_ARGS) \
-	$(1)
+	"$(1)"
   endif
 
@@ -3974,5 +3974,5 @@
 	$(VBOX_TOKEN_NAME_ARGS) \
 	$(VBOX_PIN_ARGS) \
-	-e $(1)
+	-e "$(1)"
 
   ## Commands for signing a driver image after link.