InstallAware_X3_With_Runtimes.exe not digitally signed. Why?

[Maximinus]

The InstallAware_X3_With_Runtimes.exe file that is downloaded when you select the Single File Download option is not digitally signed. Why is that?

Thanks.

[FrancescoT]

Dear Maximinus,

this is due the size of the InstallAware_X3_With_Runtimes.exe which exceeds the 2 Gb limit and due of this, it cannot be signed.

Probably this will change in future.

Regards

[Maximinus]

Thank Francesco,

If you don't mind me asking. What process prevents the file from being digitally singed? Are you guys using InstallAware itself to create the InstallAware_X3_With_Runtimes.exe setup file? If so, is this an InstallAware limitation or is this limitation coming from some other tool?

Thanks.

[FrancescoT]

Dear Maximinus,

It's not due an InstallAware limitation, but instead depending on how the file gets signed, due a limit of the WIN Crypto APIs or of the Microsoft SignTool. It seems that the latest WIN Crypto APIs version overcomes such limitations and maybe, it could be possible to have such possibility in future IA releases.

Regards

[Maximinus]

Hi Francesco,

After reading your response, I am getting a weird feeling that perhaps you guys may be treating the digital signature issue as nothing more than a minor detail. Is this the case? I am only asking this because I consider the digital signature issue a major issue and something that should be addressed as a top priority issue (no file should be provided for download without a digital signature).

My problem right now is hat the company where InstllAware is supposed to be installed does not allow executing non digitally signed programs (This is their policy). They also need to be able to install InstallAware completely offline so the WebBased download is not an option.

Can you recommend possible solutions to my problem? Should I expect to be able to download the single file installer digitally signed in a couple of days from now?

Thank you very much for your help.

[FrancescoT]

Dear Maximus,

...reading your reply I have the feeling that you are ignoring the fact that such limitation doesn't depend on us.

Our attention to Digital Signature implications are always very high, for example, did you read what we posted in our blog about Microsoft’s New Code Signing Policy?
http://www.installaware.com/blog/

As I said, if it will be possible to overcome such limitations (in case the new APIs will allow this), it may be possible to have such possibility in future IA releases.

Alternatively, you may use the Web Installer version. Have care to specify a directory where to store downloaded WMBs during setup interview. Then when the installation is completed, copy the InstallAware WEB setup executable in the folder where you stored the downloaded components and backup the folder for later use.

Finally, run the WEB setup from your backup the next time you need to install the product.

Hope this helps you.

[Maximinus]

I just noticed that the new InstallAware_X4_With_Runtimes.exe is now digitally signed! Thank you very much, great job!

[FrancescoT]