Page 1 of 1

Signing installation packages

Posted: Fri Jun 03, 2016 2:33 pm
by jessican
Hi!

I wanted to know if you had any advice on how to “sign” the installation package so that Windows lists it as a known publisher. I have no idea how this is done, where I'd need to register a certificate, would an additional InstallAware add-on be needed, etc?

Re: Signing installation packages

Posted: Sat Jun 04, 2016 9:50 am
by Weatherlights
You can register for a certificate by any certificate authority which provides Code Signing Certificates.

Here are some:
https://www.symantec.com/de/de/code-signing/
https://startssl.com/ (Class 2 and Class 3 Validation include one)
https://www.comodo.com/business-securit ... igning.php
https://www.digicert.com/code-signing/

Usually the certificate authority has a wizard that guides you through the enrollment process and you need to verify your identity according to the gudeliness of the certificate authority. After your certificate has been enrolled you can export it to a PFX-File using the certificate snap-in from Windows by following this manual:

https://www.digicert.com/ssl-support/pf ... -iis-7.htm

You can use the PFX file and the password you created during the export to sign your setup from InstallAware (No plugin needed).

Re: Signing installation packages

Posted: Mon Jun 06, 2016 9:06 am
by jessican
Thanks soo much for that info and the links. It's honestly so helpful! :D