Signing installation packages

[jessican]

Hi!

I wanted to know if you had any advice on how to “sign” the installation package so that Windows lists it as a known publisher. I have no idea how this is done, where I'd need to register a certificate, would an additional InstallAware add-on be needed, etc?

[Weatherlights]

You can register for a certificate by any certificate authority which provides Code Signing Certificates.

Here are some:
https://www.symantec.com/de/de/code-signing/
https://startssl.com/ (Class 2 and Class 3 Validation include one)
https://www.comodo.com/business-securit ... igning.php
https://www.digicert.com/code-signing/

Usually the certificate authority has a wizard that guides you through the enrollment process and you need to verify your identity according to the gudeliness of the certificate authority. After your certificate has been enrolled you can export it to a PFX-File using the certificate snap-in from Windows by following this manual:

https://www.digicert.com/ssl-support/pf ... -iis-7.htm

You can use the PFX file and the password you created during the export to sign your setup from InstallAware (No plugin needed).

[jessican]

Thanks soo much for that info and the links. It's honestly so helpful!