Code signing certificate

[Michelle]

Can anyone reccomend an affordable way to sign my macros?

Self-cert is no good for me as the tick-box to "always trust content
from..." is only available on the machine it was created on.

But I can only find certificates that cost hundreds of dollars a year.

I'm happy to pay for a certificate, but they seem VERY expensive for what
I'm going to use them for. AND they only last for a year.

Have I missed something? Is there a longer lasting one, or a cheaper
alternative? Or can I do something to enable the "Always trust content
from..." tick box so that I could use the self-cert option?

All input vey gratefully received

Thanks

M

 

[Kassie]

Can't you just copy your certificate to the other machines as well?

Press <Alt><F11> to go to VBA. Click on Tools, digital Signatures, view
your signature, select copy to file, and then follow the prompts to export it
to a file. Mail this to the other user.
To import, left click on the attachemnt, select open. Now click on the set
contact trust button. When the Import Contact Settings box appears, check
the first two option boxes and click OK, and OK out.

Now open the signed project, select the imported signature, and sign. You
can now make changes on the user's PC
--
HTH

Kassie

Replace xxx with hotmail

 

[JLatham]

Besides what you said, usually you are required to be a 'business' and
registered as such to obtain anything other than self-cert. About the least
expensive I've seen is through GoDaddy.com ($199.99/yr or $179.99/yr if you
purchase 2 yrs at once). And they have the must-be-a-business rule in effect.

Look at what Kassie suggested, probably the easiest way to go if you have a
established group that you want to provide a certificate to so that using
your applications is easier for them. But if it comes down to that, it's
usually a matter of trust, and my clients seem to trust my work, signed or
not. I mean they've got to have trust in you to install your self-cert on
their systems anyhow, don't they?

 

[Kassie]

Very true, but it is nice to run on High security, and so keep out other
junk. I find that doing it this way saves a lot of hassel, and of course it
is for free!

--
HTH

Kassie

Replace xxx with hotmail

 

[Gord Dibben]

Kassie

Are you saying that you can export a selfcert DS to another computer?

Easy enough to create a *.cer file but how do you export the key?


Gord Dibben MS Excel MVP

 

[Kassie]

Hi Gord,

From a previous post of mine. . .
Press <Alt><F11> to go to VBA. Click on Tools, digital Signatures, view
your signature, select Copy to file, and then follow the prompts to export it
to a file. Mail this to the other user.
To import, left click on the attachemnt, select open. Now click on the set
contact trust button. When the Import Contact Settings box appears, check
the first two option boxes and click OK, and OK out.

Now open the signed project, select the imported signature, and sign. You
can now make changes on the user's PC

--
HTH

Kassie

Replace xxx with hotmail

 

[Gord Dibben]

No problem copying to file *.cer

But how do you export the Private Key or do you need it?

I have tried this previously but was never able to make it work.

I have tried installing into Trusted Root Certificates and Trusted
Publishers but when I tried to use the DS I received the message about not
having a key.

If not too much trouble could you email me a copy of a selfcert DS so I may
install on my computer?

gorddibbATshawDOTca


Thanks, Gord

 

[Kassie]

While I have never used this info, have a look at the following site:
http://www.source-code.biz/snippets/vbasic/3.htm

Christian d'Heureuse suggests the use of makecert.exe, cert2spc.exe and
pvkimprt.exe to achieve this objective. These commands form part of the .NET
Framework and Platform SDK.

--
HTH

Kassie

Replace xxx with hotmail

 

[Gord Dibben]

Thanks for the pointer to that site.

I will look into this Kassie.

From your earlier reply to OP I thought your sending of the DS to another
computer was referring to a selfcert DS.

I guess you meant a commercial DS


Gord

 

[Kassie]

No, it was a selfcert DS, but have never worked on a server environment. As
I understand it, that is where you need the key. All I know is that I export
ym Selfcert, import it on the other PC, and it works.

--
HTH

Kassie

Replace xxx with hotmail

 

[Gord Dibben]

Please email a selfcert DS that you create so I may test on my computer.

Thanks


Gord

 

[Kassie]

That's a bit difficult, since e mails get rejected on your side, using the
email on your profile, iso replacing words with symbols, suc as DOT with . ?

--
HTH

Kassie

Replace xxx with hotmail

 

[Gord Dibben]

Replace AT with @

Replace DOT with .


Gord

 

[Kassie]

That's what I did, but it was returned?

--
HTH

Kassie

Replace xxx with hotmail

 

[Gord Dibben]

gorddibbATshawDOTca

Sorry to be such a pest Kassie


Gord

 

[Kassie]

I used that address, I changed the AT to @, and the DOT to ., but it was
returned as undeliverable, Gord. I think your server is rejecting the
attachment if you ask me. Send me your private email address to the one in
my profile, and maybe we can then get there?

--
HTH

Kassie

Replace xxx with hotmail

 

[Rich/rerat]

Kassie,
You may need to Zip file the attachment first?

--
Add MS to your News Reader: news://msnews.microsoft.com
Rich/rerat
(RRR News) <message rule>
<<Previous Text Snipped to Save Bandwidth When Appropriate>>


I used that address, I changed the AT to @, and the DOT to ., but it was
returned as undeliverable, Gord. I think your server is rejecting the
attachment if you ask me. Send me your private email address to the one in
my profile, and maybe we can then get there?

--
HTH

Kassie

Replace xxx with hotmail