VeriSign Code Signing for Microsoft Authenticode For developers and software publishers of active content, code signing reduces error messages and builds trust in
your reputation. VeriSign® Code Signing Certificates for Microsoft® Authenticode® authenticate your identity and validate code integrity.
- Silverlight® 4 applications support
- Digitally sign 32-bit or 64-bit user-mode (.exe, .cab, .dll, .ocx, .msi, .xpi, and .xap files) and kernel-mode software
- Provider for Microsoft Windows® Logo programs
- Show customers that your code and content is safe to download
- Protect your brand and your reputation with a trusted digital signature
- Reduce the cost of maintaining code with a free timestamp
Benefits of VeriSign Code Signing
- Increase the adoption and distribution of downloadable software with digital signatures
- Build a trusted relationship for your brand by reducing error messages and security warnings
- Protect users from downloading harmful files
- Go with the leader: VeriSign supports more platforms than any other provider
Enrollment Process
- Select Certificate Options - choose a validity period.
Validity period: a longer validity period reduces the annual cost of your VeriSign® Code Signing Certificate for Microsoft® Authenticode®.
The validity period is the active lifespan for the certificate. At the end of the validity period, the certificate must be renewed to remain active. A longer
validity period typically includes cost savings and you won't need to renew the certificate as often for it to remain active. A shorter validity period
provides greater security and integrity because the certificate's common name and organizational information must be re-authenticated more often.
Requesting 2 and 3-Year Certificates
Note the following restrictions when selecting a 2 or 3-year validity period:
- A 3-year SSL Certificate is compatible only with a 2048-bit private key (or stronger). When generating your CSR, make sure the generated key is at least
2048 bits. Note: This does not apply to Code Signing IDs.
- The 2 and 3-year options are not available for CodeSigner Pro.
- For certificate and organizational integrity, your organization will be re-authenticated after two years (with no action required on your part).
If your organization name or domain ownership has changed since purchasing this certificate, the certificate may be subject to revocation.
- Enter Required Information
- Technical contact: Name, address, phone number, and the email address where the certificate and renewal notices should be delivered.
- Certificate information: The organization name that will appear in the code signing certificate. Provide the cryptographic service provider (the software or hardware token where the key pair will be generated), and a backup location for your private key such as a hardware token.
- Challenge phrase: A password used to renew or revoke your certificate.
- Organizational contact: VeriSign contacts this person to authorize your certificate request as part of the certificate authentication process. Provide accurate information to expedite the process and to ensure that renewal notices reach the organization contact.
- Payment information: VeriSign must receive payment before delivering your certificate.
- Pickup Your Code Signing Certificate.
Once approved and payment is received, you will receive an issuance email containing a link to download the certificate directly into the browser.
If you have problems with retrieval, confirm that you are using the same computer, browser, and log-in profile used to enroll.
Digital Shrink Wrap to Protect Your Brand
VeriSign® Code Signing Certificates provide a virtual "shrink wrap" for secure delivery of content over the Internet.
When customers download software signed with Authenticode® Technology and verified by VeriSign, they can be assured
of the content source and the content integrity. Code Signing adds a level of trust to your applications and makes them
harder to falsify or damage, protecting your brand and your intellectual property.
Increase Customer Confidence with Fewer Security Warnings
When Internet Explorer, Exchange, Outlook®, or other Microsoft programs encounter unsigned executables, a security
warning disrupts the user or content simply fails to load. To prevent disruption, publishers who use ActiveX® controls,
plug-ins and other executables should sign their code using Authenticode Technology and a VeriSign Code Signing
Certificate for Microsoft Authenticode.
Make the Most of Your Code Signing Investment
With VeriSign Code Signing Certificates, developers select a platform, a validity period and install the certificate on their
desktop or a portable device such as a USB drive. A timestamp option shows when code was signed, allowing customers
to verify that the code signing certificate was valid at the time of the digital signature. VeriSign is a trusted provider of
digital certificates for Microsoft Windows® Logo programs.
The Leader in Online Trust and Security
VeriSign supports more platforms than any other code signing provider with the most reliable infrastructure and the most
trusted security brand on the Internet (Tec-Ed Whitepaper, PDF, Oct. 2007).
Because VeriSign root certificates come preinstalled on most end users’ devices and embedded in most applications, the digital
signature authentication and verification process is seamless and transparent to most end users.
Read About Important Enrollment Requirements
Please make sure you:
- Use Internet Explorer 5.0 or higher
- Use Windows 2000, XP, or higher
- Must use the same PC, Windows login/user profile, and browser for enrollment and certificate installation
- If you are using Internet Explorer 7 or 8 on either Windows Vista or Windows 7, please enable Active X.
Configure Internet Explorer 7 Internet Explorer 8
In order to allow Internet Explorer 7 and 8 to successfully enroll for and install a Microsoft Authenticode ID, please make
the following changes to the security settings of the browser:
1. Open Internet Explorer
2. From the menu bar, click Tools > Internet Options > Security
3. Select Trusted sites zone
4. Click Sites
5. Enter https://securitycenter.verisign.com
6. Click Add > click OK
7. In the Security tab, click the Custom Level button.
8. Under ActiveX controls and plug-ins, set all Active X options to “Enable”
9. Click OK > OK
10. Close all Internet Explorer 7 windows
11. Open a new Internet Explorer 7 window and return to enrollment
Note: If the enrollment still does not work correctly it could be due to a cache issue. If any additional problems occur please clear the browser cache.
To do so go to:
1. Tools > Internet Options > General
2. Under the section "Browsing history" select the "Delete" button.
3. Place a tick next to
a) Temporary Internet files
b) Cookies
c) History
d) Form data
e) Passwords
f) InPrivate Filtering data
4. Then select the "Delete" button.
Once the cache is cleared, close and re-open Internet Explorer and attempt the enrollment again.
|
