Digital Signature Possible for a Compiled Macro?

[jpuziano]

Hi Marcus,

- compile a macro to a standalone .exe file
- put it on a corporate website with a link to it on a web page
- user (running IE 6) clicks it to run it... it says:

The publisher could not be verified. Are you sure you want to run this software? This file does not have a valid digital signature that verifies its publisher. You should only run software from publishers you trust. etc. etc.

Doesn't inspire a lot of trust there to use a compiled macro. If one were to purchase a "valid digital signature" (no idea what that might cost)... would it be possible to compile the macro and have the signature embedded within?

[JRL]

A little poking around on the internet and I found quite a bit of information regarding Microsoft, Verisign and the purchase of digital signatures. Did not yet find any info about the cost. The information included in this discussionmakes it sound like avoiding the unverified publisher warning can be easily accomplished by zipping the exe and posting the zipped file. The downloadee will need to unzip the file but thats easy in WinXP and apparently this warning only occurs with XP SP2. Beats sending more money to the wealthiest people on the planet.

Later,
Dick

[Marcus Tettmar]

Yes, you can sign compiled Macro Scheduler macros. You need two things:

1. An Authenticode Certificate. You can get these from Thawte, Verisign etc. The cheapest provider appears to be Comodo:
http://www.instantssl.com/code-signing/

2. The code signing tool from Microsoft which comes with Visual Studio. Can also be downloaded from:
http://www.thawte.com/dynamic/en/images ... etSDk5.zip

This page at Thawte has other useful information:
http://www.thawte.com/ssl-digital-certi ... sauth.html

[jpuziano]

Hi JRL and Marcus,

Thanks for the links and info, much appreciated. The following link inside one of the links you sent JRL... was quite enlightening: The Wacky World of Windows Internet Security Settings