Linker IT Software
Google
Web www.oraxcel.com
menubar-top-links menubar-top-rechts
Home Help Search Login
Welcome, Guest. Please Login.
SQL*XL: Database to Excel bridge litLIB: Excel power functions pack ExcelLock: Locking and securing your valuable Excel spreadsheets encOffice: Protect your Excel file easy and safe encOffice: Protect your Excel file easy and safe
Pages: 1
Installing digital certificate with all roots (Read 1694 times)
Gerrit-Jan Linker
YaBB Administrator
*****




Posts: 75
Installing digital certificate with all roots
16.11.09 at 15:56:50
 
Installing digital certificate with all roots

 
I have a thawte Microsoft Authenticode Code Signing certificate
 
Files (dlls, add-ins) can be signed with the Microsoft Authenticode Code Signing certificate but still not be marked as trusted then the so called root certificates are not installed. Digital certificates work in an hierarchy. Each certificate needs to be installed and trusted in order for a digital signature to be trusted.  
 
Many times I find that people do not have the Thawte (my certificate issuer) root certificate installed. They can install my certificate but it is still not rendering to a trusted signature because the Thawte root is missing.
 
This article describes how to sign a file using a certificate that includes all roots. Upon installation all the certificates get installed. Problem solved.
 
Here is what you have to do:
This is all on the signing machine:

  • 1. open IE
  • go to Tools (or extra if you use a Dutch version of Internet Explorer)
  • Internet options
  • content (or Inhoud if you use a Dutch version of IE)
  • certificates
  • Find your certificate
  • select it and click export
  • yes, export private key
  • tick in 1st box:  
    If possible export all root certificates
  • no tick in 2nd (extra security) or 3rd box (remove personal key)
  • finish the wizard
  • delete certificate from IE
  • import PFX file
  • Try to sign again
  • Test on a machine that usually gives an error

 
The above worked for me however upon updating the certificate this does not seem to work anymore. I was given the following advice:
Thawte advice
Back to top
 
« Last Edit: 26.04.12 at 09:37:42 by Gerrit-Jan Linker »  

Gerrit-Jan Linker
Linker IT Software
Email WWW Gerrit-Jan Linker   IP Logged
Pages: 1