Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I have need for a code signing certificate which is trusted by a CA in the windows domain. How do I request/create this certificate?

Do I have to request a code signing certificate on the certificate server? I do not have access to this server myself and want to know if this is the only option. I believe that you have to enable the code signing template before you can request a certificate, which can be used to sign code (in my situation an InfoPath form). Is this correct?

I'm also wondering about the possiblity to create a self signed certificate and make this trusted by the CA on the certificate server. Is this possible and considered good practice?

And a bit more practical, can you request a code signing certificate from a CA certificate on a client environment? If this is possible I assume you need to possess both private and public keys?

Extra information would be appreciated.

share|improve this question
1  
Your question seems to be based on a lot of unstated context. For example, you say "the certificate server". Umm, what certificate server are you talking about? When you say "CA", do you mean your own internal CA? Or are you talking about a public CA? And what does it mean to "request" a certificate "from a CA certificate"? –  David Schwartz Jun 27 '12 at 13:30
add comment

2 Answers

up vote 1 down vote accepted

Many code signing implementations will provide a way to sign the code using a system involving a pair of keys, one public and one private, similar to the process employed by SSL or SSH. For example, in the case of .NET, the developer uses a private key to sign their libraries or executables each time they build. This key will be unique to a developer or group or sometimes per application or object. The developer can either generate this key on their own or obtain one from a trusted certificate authority (CA).

one of the trusted certificate authority which i am using

Thesslstore $79.20/year

share|improve this answer
add comment

I don't know exactly what you are wondering, but as far as I know you have to download the code signing certificate to each computer that you want to use it on.

The only way to get a trusted certificate is through a Certificate Authority here are a few and their prices:

Then you can sign the code using Microsoft's SignTool.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.