What is the digital signature software? What it takes to digitally sign software?
I'm using the Kaspersky antivírus and the software I wrote, in Delphi, is flagged by the antivirus software due to lack of digital signature, as an untrusted software.
To use my software I need to go to the Kaspersky and set it as a trusted application.
Observing this article I see that the use of certificates is required:
Before you can get started, you'll need a code-signing certificate and associated private key.
Then immediately says I can generate a key in my infrastructure:
You can generate your proper code-signing certificate using your internal Windows public key infrastructure (PKI) or you can buy one from a commercial Certification Authority (CA) such as Verisign.
So, I ask:
- How can I generate a certificate on my own infrastructure?
- What are the advantages and disadvantages of obtaining a digital certificate?
- What are the advantages and disadvantages to digitally sign software?
- What is the difference between a certificate generated in my own infrastructure against a certificate obtained by a certifying institution?