Jump to content


This is a ready-only archive of the InstallSite Forum. You cannot post any new content here. / Dies ist ein Archiv des InstallSite Forums. Hier können keine neuen Beiträge veröffentlicht werden.
Photo

Acquiring Digital ID's


1 reply to this topic

RayKode

RayKode
  • Full Members
  • 58 posts

Posted 26 September 2006 - 21:01

Afternoon everyone.

I have begun testing our various merge modules and msi with the Windows Vista OS.

When I run Vista logo verification on my merge modules (IS 12), I get an error message indicating that I need to sign all of my .exe's and .dll's before installing them IF I want to apply for logo certification.

Has anyone acquired digital ID's for their objects ?

If so, how did you do it ?

Did you buy a product that allowed you to acquire Digital ID's ?

If so, which one ?

What did it cost ?

Do you pay by the acquired ID ?

How does that work ?

Once you have the Digital ID, how do you go about applying it to the object ?

Is there a utility of some sort or can I use IS(version 12) to sign the objects ?

I'm so confused as to how "the process" works.

I should be grateful if someone could explain it to me.

Kinda like a Digital ID's for Dummies.

Thanks in advance for all responses.

Ray in Wisconsin


Zweitze

Zweitze
  • Full Members
  • 522 posts

Posted 26 September 2006 - 22:08

- Has anyone acquired digital ID's for their objects ?
Yes...
- If so, how did you do it ?
By buying digital certificates
- Did you buy a product that allowed you to acquire Digital ID's ?
No, you ask the company to generate a digital certificate for you. You can use the certificate for a year, in that year you can sign as many files as you like - in other words there's no need to install your own Certificate server.
- If so, which one ?
You must buy an "Authenticode Class 3 digital certificate"
- What did it cost ?
About 400 Euro, you can use it for one year.
- Do you pay by the acquired ID ?
Certificates for secure payments over the internet are a different product.
- How does that work ?
Your webserver for payments secures transactions by issuing a new certificate for each transaction. But you should ask someone who's more familiar with e-business.
- Once you have the Digital ID, how do you go about applying it to the object ?
You run Signcode.exe, which is probably already present on your system.
- Is there a utility of some sort or can I use IS(version 12) to sign the objects ?
It's different: first you compile and link the files, then you sign all DLLs and EXEs, and then you build the package with InstallShield. Finally you can sign the resulting MSI and CAB just like you sign an EXE.

For more information try their vendors, eg.
http://www.verisign....ning/index.html
and
http://www.thawte.co...ning/index.html