Code signing a little more

[NewsArchive]

I have code signed the install program and the main executable. Under xp
they run fine. Under Vista (security warning) - do you want to run this
file. This happens for the install program and the executable file. The
properties of the exe's show the digital signature. Is there something else
that needs to be done for vista.

I am building SB on a xp and moving the executable to vista Home. I have
also tried with the uac on and off.

What have I missed.

Thanks

Gary

[NewsArchive]

Gary,

The "Do you want to run this file" appears if you have downloaded a file
from the Internet or received through a LAN (Windows thinks that it can be
potentially harm your computer). It has nothing to do with the code-sign
certificate. Windows sets a magic flag if the file comes from the Internet
or LAN.

HTH,
Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Sorry friedrich - I actually thought that was what code signing was for. I
will have to look somewhere else for the answer. I don't like users
clicking on a icon to run a program and being asked if they want to run that
program.

Thanks for the info.

Gary

[NewsArchive]

Hi Gary,

> Sorry friedrich - I actually thought that was what code signing was for.
> I will have to look somewhere else for the answer. I don't like users
> clicking on a icon to run a program and being asked if they want to run
> that program.
>
> Thanks for the info.

See Jane's answer.

Code-signing cannot overcome this Windows security message. If your
customers have not "disabled" that Windows feature, then they'll always see
it.

If you don't code-sign, running your installer would result in a "An
unidentified program wants access to your computer" Vista message with a
warning that "Don't run the program unless you know where it's from or
you've used it before."

And depending on a Vista policy setting, an unsigned installer might not
even run.

So code-signing is really a "must do"!

HTH,

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.7
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Amplifying on what Friedrich wrote, your situation depends on whether you're
talking LAN or Internet.

Something download from the Internet has the magic flag set. That can be
cleared if the user clicks Properties for the file on his hard drive, then
clicks the Unblock button.

Files run from a LAN (meaning that in effect their "downloaded" each time
the user runs them) can avoid that question by changing a setting in
Internet Explorer.

If you have a clarionmag subscription, you might find some tips in this
article: http://www.clarionmag.com/cmag/v9/v9n01signing.html

Jane

[NewsArchive]

Thanks for all the info. I am much better informed now.

Gary