code signing
-
27 มีนาคม 2555 11:58
Windows 2008 R2 ENT CA
Our .net developers asked me to create a code signing cert for their applications, that was the easy part. I am very familiar with users certs and computers certs and deploying them but how do I apply this to an application??
ตอบทั้งหมด
-
27 มีนาคม 2555 11:41
Windows 2008 R2 ENT CA
Our .net developers asked me to create a code signing cert for their applications, that was the easy part. I am very familiar with users certs and computers certs and deploying them but how do I apply this to an application??
- รวมโดย Arthur_LiMicrosoft, Moderator 27 มีนาคม 2555 23:58 duplicated
-
27 มีนาคม 2555 11:44
Hello,
for security i suggest to ask in http://social.technet.microsoft.com/Forums/en/winserversecurity/threads
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
- เสนอเป็นคำตอบโดย Prashant Girennavar 27 มีนาคม 2555 11:47
-
27 มีนาคม 2555 11:56
Besides security, I would also suggest you consider posting this in the code language the application is was developed in. The users within that community will have done this before and should be able to guide you with the exact steps.
--
Paul Bergson
MVP - Directory Services
MCITP: Enterprise Administrator
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, Vista, 2003, 2000 (Early Achiever), NT4
http://www.pbbergs.com Twitter @pbbergs
http://blogs.dirteam.com/blogs/paulbergsonPlease no e-mails, any questions should be posted in the NewsGroup. This posting is provided "AS IS" with no warranties, and confers no rights.
- เสนอเป็นคำตอบโดย Meinolf WeberMVP 27 มีนาคม 2555 17:49
-
27 มีนาคม 2555 12:04Code signing certificates are distributed to users. When necessary, a user may use .NET native tools (classes and methods) or use external tool (say, signcode.exe) to sign the data. In other words, you need to issue code signing certificate to responsible person (who will perform data signing) and the rest is done via mentioned tools.
My weblog: http://en-us.sysadmins.lv
PowerShell PKI Module: http://pspki.codeplex.com
Windows PKI reference: on TechNet wiki -
27 มีนาคม 2555 12:39
Not being a developer I'm not sure what that means but I will pass it along, thanks.
One other observance I had was that I gave the cert template a 5 year expiration however as I look at mine it is only 2 years. Any ideas?
-
27 มีนาคม 2555 13:04
ok, will do.
One other observance I had was that I gave the cert template a 5 year expiration however as I look at mine it is only 2 years. Any ideas?
-
27 มีนาคม 2555 15:53
Your CA is set to default settings and a governor is limiting the validity period of issued certs to 2 years
Run
certutil -setreg CA\ValidityPeriodUnits 5
certutil -setreg CA\ValidityPeriod "Years"
net stop certsvc && net start certsvc
This will increase the max validity period to five years, matching your cert template
Brian
- เสนอเป็นคำตอบโดย Brian Komar [MVP]MVP 27 มีนาคม 2555 15:53
- ทำเครื่องหมายเป็นคำตอบโดย jamicon 29 มีนาคม 2555 14:32
.png)
