Re: Code Signing Question?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

"AliR (VC++ MVP)" <AliR@xxxxxxxxxxxxx> wrote in message news:hIe_k.8972$Ei5.7865@xxxxxxxxxxxxxxxxxxxxxxx
Our program is typically installed on a network server and then users have shortcuts to the executables on the server machine.
Recently one of our customers (which are all schools) called and complained about the Security Warning dialog that is coming up on their system. "The publisher could not be verified. Are you sure you want to run this software?"

Now the only way I know to solve this is to apply for a certificate and sign our exes with it.

I wanted to know if anyone here has had to do that before, what should I look out for?

What happens when the certificate expires and I have to renew it, does it mean that I have to send out a new certificate file to every single customer?

Thanks
AliR.



Yes, I have seen this warning dialog when running my .exe's from network drives.

Yes, you need to apply for an Authenticode (Code Signing) certificate. I believe I got mine from Comodo. You should look out for the best price! I think I got a special of about $75 USD per year. When the cert expires, you won't be able to sign your .exe's with it anymore. Any previously signed ..exe's remain OK. You don't "send out" any cert to your customer. The cert is embedded into the .exe when it is signed.

-- David



.

Relevant Pages

  • Re: OWA website not available
    ... How can we get rid of this security warning window... ... I mean is there a way for dynamiclly installing our internally-generated ... certificate on our client so that our uses don't need to click on the OK ... You need to apply a cert to the website itselfbefore you ...
    (microsoft.public.exchange.setup)
  • Re: harddrive DoD datawipe certificate
    ... customer require harddrive DoD datawipe as option. ... we'd like to provide some sort of certificate ... For string certificates you would need a tamper-proof disk wipe ... And a reliable way to tie the certificate to the disk. ...
    (comp.sys.ibm.pc.hardware.storage)
  • Re: Broadband prices
    ... When my cert expired my site was offline for over a week while they fannied about until I finally gave up and got hosting elsewhere, there was no indication that they were ever going to manage to get it sorted for reasons I can't fathom. ... They wouldn't refund the price of the cert which I thought was piss poor customer service so now they don't get £300 per year for broadband. ... I thought they would take a loss of £50 to keep me as a broadband customer and not doing so seemed stubborn beyond belief especially when I had lost a fair amount of money in sales. ...
    (uk.comp.homebuilt)
  • Re: harddrive DoD datawipe certificate
    ... customer require harddrive DoD datawipe as option. ... we'd like to provide some sort of certificate ... Let me know if anyone know any sort of software or hardware system ...
    (comp.sys.ibm.pc.hardware.storage)
  • Re: WS Security issues
    ... I can't generate the certificates when I install my product? ... > Yes you do have to redistribute the x509 if you choose to use it. ... >> But dont I then have to redistribute a new X509 certificate per customer? ...
    (microsoft.public.dotnet.framework.webservices.enhancements)