Digital Signatures on TechNet Gallery - thoughts?

I've recently obtained a code-signing certificate from DigiCert (who are awesome, and offer these certs for free to MVPs for personal use), and was thinking of going back and signing the various bits of script that I've posted to the TechNet Gallery. However,
most of these posts are code fragments (individual functions, etc). The intention isn't that the user will run them as-is, but just copy and paste the code into their own modules, profiles, scripts, or whatever.
This means that my signature would be thrown out anyway before the code is executed, but there may still be some benefit in verifying, at the time of download that the code hasn't been modified in any way since I originally uploaded it (say, for instance,
if someone manages to gain unauthorized access to my Microsoft account or the TechNet Gallery in some way.)
The only one I've signed so far is the Enhanced Script Logging Module, because that is uploaded as a zip file that contains, among other things, a compiled DLL. Not only is that one intended to be run as-is, but it's also harder for people to
verify that the DLL file is safe to run.
What do you think? Worth the time to go back and sign / re-post everything else?

Hey Len
there is an internal mailing list for Oracle folks - drop me a mail for it.
that said, the standalone release of Publisher supports a site wide(no support for user digital signatures) digital signature that will be added to all PDF documents that BIP generates.
Please check the documentation for more info - http://download.oracle.com/docs/cd/E10415_01/doc/bi.1013/e12188/T421739T475591.htm#5013688
regards
Tim

Similar Messages

Excel 2013 crash - related to digital signature?

This is a cross-posting of a thread originally started in Microsoft Answers (Office- Excel) forum, advised to post in this forum by MS support engineer Mohan Suryanarayan (link to other forum: here).
I have a VB macro in file A (which otherwise contains only several Excel Tables with named ranges). My digital signature (for signing code) is attached to file A.
As the macro executes, the Open file dialog is called up so that the User can select a secondary file to open (file B or C).
Files B and C contain several sheets with formulas and Excel Tables, and also their own extensive VB macros. My digital signature is also attached to files B & C.
The remainder of the macro in file A simply executes an update of the Excel Tables in the secondary file, before saving & closing it.
I have been finding that during execution of the file A macro, Excel crashes and closes all open Excel files.
If I remove the digital signature from the secondary files then the macro in file A executes with no problem.
The macro was written in Excel 2007 and on a different laptop, with different digital signature, and used to have no problem at all. When a new laptop was purchased a new digital signature was obtained and placed into all of the files.
Execution of file A is a critical process - I need help with stopping the crash, while maintaining a digital signature in the secondary files (so that their own macros can execute).
Event Viewer error shows the following:
Faulting application name: EXCEL.EXE, version: 15.0.4667.1000, time stamp: 0x543d366c
Faulting module name: mso.dll, version: 0.0.0.0, time stamp: 0x5447696f
Exception code: 0xc0000602
Fault offset: 0x011aafdd
Faulting process id: 0x2d58
Faulting application start time: 0x01d01e17eafcd0bb
Faulting application path: C:\Program Files\Microsoft Office 15\root\office15\EXCEL.EXE
Faulting module path: C:\Program Files (x86)\Common Files\Microsoft Shared\Office15\mso.dll
JL Latham replied:
Tom, all I can give you is relatively non-information. I haven't experienced that type of behavior even in Excel 2013 with digitally signed macros in multiple workbooks. But my digital signature is a commercial one from DigiCert, not
self-cert. I'm not even sure what piece of Excel or Office processes the digital signature (that is, whether it is mso.dll or not). But your whole process has more moving parts than most of mine involving multiple workbooks do - I quite often turn
off .EnableEvents when doing things like that just so event driven macros in the other workbook(s) do not execute.
Do the macros in the 'B files' have to execute during all of this processing in file A? If not, have you tried turning interrupts off:
Application.EnableEvents = False
before starting to work with the B-files? Maybe something in them, such as a Worksheet_Change() or other event triggered process is messing things up?
If you do use Application.EnableEvents=False, remember that you MUST re-enable that later in the code with Application.EnableEvents=True to get responses to things like button clicks, changes in a worksheet or other event driven processes
to run 'normally' again.
Have you looked at this discussion:
http://answers.microsoft.com/en-us/office/forum/office_2013_release-excel/excel-2013-crashing-immediately-when-attempting-to/ea2ab100-5525-4a0d-a3cf-6977319f954f
Sounds very similar to yours - original signature created in 2007, and crashing in 2013. Some suggestions were made, but whether they fixed the issue or not is unknown: OP never came back and said "fixed it" or "didn't fix it".
I replied:
In answer, the secondary B files don't execute any part of their macros during the A file process, and I hadn't included an EnableEvents = False within the file A code. However, I have just tried it to check if it made any difference and unfortunately it didn't.
I had read the thread you gave a link to before posting, and also the sub threads given within that one, but didn't see anything I thought of immediate parallel other than an Excel 2013 crash.
The way I read the linked thread was that a User added a signature in Excel 2007 and when they tried to open the file Excel (2007?) crashes, although other people using Excel 2013 can open it (not clear whether it means others can open the one with
the 2007 signature or without it).
Anyway, the differences in my situation are that:
(1) my B-files were originally created in Excel 2007 on a different laptop to current and had their own signature attached. I maintain a 'stock' of B-file versions, some of which have the old signature and some the new. If I run the A-file macro
on one of the B-files with the old signature then it executes ok;
(2) I am able to open the B-files ok, no matter whether the signature in them derives from the old laptop with Excel 2007 or the new laptop with Excel 2013;
(3) the macros within the B-files execute ok (this includes any versions of the B-files which still have an old signature attached, by removing the old signature and replacing with the new and executing on the new laptop);
(4) the offending operation which triggers the crash (when the B-files have the new signature attached) is a Resize of the Excel Tables within the B-file. I understand that I may eventually have to find a workaround for this operation but initially
I want to sort out the signature issue (I'm reasonably sure the signature issue is not a red herring where the Resize is the 'real' problem).
Regards, Tom

Hi,
According to your description, this issue occurred with some particular files that stored in SharePoint site. Did the user download the file to local disk to print?
Based on the event log >>Faulting module name: EXCEL.EXE<<, it does not show the root Faulting module. Thus, please try to follow this KB to do general troubleshooting:
https://support.microsoft.com/en-us/kb/2758592
Then, if you have used "printer status application", please go to Device settings -> Installable options -> Printer Status notification and select disable.
If this issue still exists, we may need to collect the App crash dump file:
https://technet.microsoft.com/en-us/sysinternals/dd996900.aspx
You can try to analyze dump by yourself if you would like to：
How to analyze app crash dump file:
http://blogs.technet.com/b/askperf/archive/2007/05/29/basic-debugging-of-an-application-crash.aspx
Regards,
George Zhao
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Temporarily disable Digital Signature Checks to Install MS SQL Server 2008 with no Internet Access

I am attempting to install a licensed copy of MS SQL Server 2008 in a Private Enclave that does NOT have Internet access on a Win2008 R2 SP1 server (that is VM - thus I can't reboot and press F8 to select "Disable Driver Signature Enforcement"
). The installation fails with an error of the vc_red.cab file being found either corrupt or a bad digital signature. The file is good, but the signature has an expiration of 2011. I understand that a DOTNET SDK v1.1 program called setreg.exe
will enable disabling the digital signature check, but I am not permitted to use that program.
I might be permitted to use the "Signtool.exe" utility, but it is not clear what command sequences are necessary to disable and then re-enable the Digital Signature checks.
I saw a thread that recommended using the command:
bcdedit.exe /set nointegritychecks ON
However, the comments indicated that this might not have worked.
Are there Registry settings I can use with regedit to make the necessary changes to be able to install the application? I anticipate running into this problem with other software when I do not have Internet connectivity. I already tried
downloading the Microsoft CRL files; updated the lists on the Server; and rebooted. This did not solve my problem.

Hi,
As far as I know, it is not recommended to disable digital signature check.
Since we are not familair with installing MS SQL server, please also refer to SQL forums below to see if experts there have more insights regarding the matter.
https://social.technet.microsoft.com/Forums/sqlserver/en-US/home
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

How do I create a digital signature on a TCP or a UDP flow?

I am trying to convert samples of a voice signal, which is intercepted from the microphone, into fixed length digital signature bytes (using Hash, or) and attach these fixed length bytes to a communication session between two terminals (UDP or TCP "HTTP"). The other receving end should be able to identify the person at the sending side.
Any thoughts how I could do this?
Any help is most appreciated.
Sam

Sam,
If you have the Sound and Vibration toolkit it may make some things easier for you regarding the voice-recording aspect, but if you aren't recording and playing back the actual sounds, just using this for detection and digital signatures, you shouldn't need to worry about this.
1. For this you are going to be doing some form of Analog Input. Then you will be storing this data to a file. There are examples for both of these aspects in the NI Example Finder from within LabVIEW.
2. If you are going to be doing the FFT, there is a VI under the Mathematics Palette that performs this operation. Again you can use the same example for saving data to the file.
3. You would need to figure out what needs to be done to create a digital signature for this. There may be something in the Sound and Vibration toolkit for this, but I do not know.
4. For the UDP or TCP transfers, there are several examples for doing this and they cover how to create the connection and transfer / receive data. These too are in the NI Example Finder
5. This goes back to number 4, this would indeed be a separate program, but everything else would just be one project and one program.
6. This would depend on how the ID was created in step 3, again whether you do the algorithm on yourself or not. For comparing to the table, you would use a Search Array and some comparison functions, all depending on how you stored the data initially.
7. Graphs are all available on your Front Panel of your VIs and you would just wire up the data that you'd like and have it displayed on the graph.
There will not be an example for everything that you are wanting to do. The examples are meant to help you get started. Have you used LabVIEW before? I would recommend doing the 3 Hour LabVIEW Introduction Course to help you get started. This will cover some of the basic concepts that you will need to know in order to create your application.
Unfortunately I cannot write the code for you, only guide and direct you. LabVIEW is a programming language and does require the user to lay out and create their own program. You will not be able to just find three or four pre-built code-snippets and connect them together to get your appliction working the way you want it. You will need to develop the applications yourself.
Regards,
Jared Boothe
Staff Hardware Engineer
National Instruments

Checking to see if a document has a digital signature

Hello,
I have created a stand alone static PDF document using the Designer 7.0.
I have some code that checks the document to ensure the proper data fields have been filled out before the user can sign the form. After signing the form the, the user is supposed to click a submit button where 2 things happen, first the data is sent for processing (do not the the digital signature info here) and second a copy of the PDF is save for archiving purposes (with digital signature).
What I need to know is how do I verify the digital signature field is not null or empty?
If I check its raw value, before and after are the same (null or empty even thought I can see that the form has been signed by looking at the screen). If I used the signatureInfo functions available in professional, I get a security violation error. The form is filled out using Adobe Reader and the forms have digital signature right added via the Reader Extensions v6.0.
Any help is greatly appreciated.
Thanks
Ben

Hi Ben, First advice is upgrade to designer 7.1. There are major improvements in the stability of designer. 7.0 kept crashing on me constantly.
I created a little function which should help you out.
function isSigned(sigField){
var oState = event.target.getField(sigField).signatureInfo().status;
/* if (oState == -1)
//app.alert("Not a signturefield");
else if (oState == 0)
//app.alert("Signature is Blank");
else if (oState == 1)
//app.alert("Unknown Status");
else if (oState == 2)
//app.alert("Signature is invalid");
else if (oState == 3)
//app.alert("Sig of Document is valid, identity of signer could not be verified");
else if (oState == 4)
//app.alert("Sig of Document is valid, identity of signer is valid");
else
//app.alert("Value was " + oState); */
return oState;
You need to pass this function the fully qualified SOM so if the signature field is in form.subform.page1.sigField you would call it like this isSigned("form[0].subform[0].page1[0].sigField[0]").
Good luck.

"digital signature on the update is missing or invalid" 10.6.8 combo 1.1 from 10.6.3.

Also got posted in '10.3 or earlier' community, where other posts are regarding this issue ... I get "digital signature on the update is missing or invalid" trying to install 10.6.8 combo on MacBook currently using 10.6.3. Have used Disk Utility, Restart, Shut Down, with no luck. Used Software Update from 2 different avenues, and also downloaded from apple site. Also searched support.apple, no luck. Thoughts?

ok. i've done the moving of those plist files, restarted and tried again. it hasn't worked, but thank you for your suggestion. i got excited for a minute or two.
it now says An unknown installation error occured. The installer encountered an error that caused the installation to fail. contact the software manufacturer for assistance.

Making a Digital Signature Form

     Hi, I am brand new to this forum, and thought that I would give it a try. i am running Abobe Acrobat Pro 9.0.
          I have been tasked with making a document that is Digital Signature ready. In other works, I need to figure out how to make a Box, with a little red arrow, where somone runs the mouse pointer over the arrow, and a note comes up that says "To digitally sign, click the arrow".
     Is there someone that might be able to assit me in this request?
     Very Respectfully: Rossknechtt,

                Thank you George. I have made a digital signature field.
          Is it possible to prove guidance as to how I Ioad trusted signatures so the signature warning does not come up? How do I add a date field with a pull down calendar?
Very Respectfully:

Acrobat pro dc windows 8.1 only digital signatures allowed when creating forms

When creating fill in forms, my only option for inserting a signature is a digital signature and then when it comes time to complete the form, it wants a digital signature and does not allow you to just insert one on the tablet you are using to complete the form,

Click to Run according to Microsoft:
https://technet.microsoft.com/en-us/library/jj219427.aspx
"Click-to-Run is a Microsoft streaming and virtualization technology that reduces the time that is required to install Office and helps you run multiple versions of Office on the same computer. The streaming technology enables you to download and begin to use an Office product before the whole product is installed on your computer. The virtualization technology provides an isolated environment for Office to run on your computer. This isolated environment allows you to run the latest version of Office side-by-side with an earlier version of Office that is already installed on your computer."

Digital Signatures in Reader

I'm trying to update the security settings to a PDF I've converted from a Word document so that my users with Reader version 9 can not only fill in the data fields, digitally sign the document and save it. On the menu, I select, Advanced, Extend Forms Fill-In & Save in Adobe Reader... This allows my users to fill in the form field and save the document but it does not allow them to digitally sign the document. When I go File, Properties, Security, my document shows the following below. Where in Acrobat 9 can I change restriction Signing to Allowed while still allowing my users the ability of Filling of form fields and Saving the document?
Regards,
Ian

First, some clarification - Using either "Enable" (Acrobat 8) or "Extend" (Acrobat 9) Adobe Reader 8.x or better can "place" a digital signature - so, a signature field does not have to be provided.
Looking at the screen shot you provided one document restriction shown is:
"Signing: Not Allowed *" - with this present, a user of Adobe Reader will not be able to "Sign".
Playing with Acrobat 8 & 9 to "enable"/"extend" I cannot duplicate a Document Restrictions Summary similar to the screen shot.
From "Extend" I get Changing the Document, Document Assembly, and Creation of Template Pages shown as Not Allowed. Signing is allowed.
As long as the PDF you send out has Sign: Not Allowed * there'll be no signing possible by users of Adobe Reader. Some how you are getting a restrictions set similar to one obtained via setting of Password security.
In a sort of Brownium Motion manner, some thoughts -
--| Compare the details of each step to what is discussed in Acrobat Help - anything different?
--| Check Help > About -- is the installed Acrobat fully updated to the latest dot release?
--| Try a "repair" (Help > Repair)
Be well...

Security Issues: SSL on SOAP Adapter and Digital Signature in BPM

Hi there,
we're developing a R/3-XI-3rd Party Application scenario, where the XI/3rd Party communication is based on a webservice (SOAP adapter with SSL). Also, the messages in the XI/3rd Party communication must be digitally signed. I've got some questions on both subjects.
1. About the SSL. I've started to investigate what will be necessary to enable the HTTPS option under SOAP Adapter (it's not enabled now). If I'm not correct, all I need to do is:
- check whether the SAP Java Crypto Lib is installed in the Web AS;
- generate the certificate request in the Visual Administrator and, after acquiring the certificate, store it with the KeyStorage option.
Is that right?
I'm considering that I won't need to use SSL in the ABAP Web AS, only the J2EE Java Engine (since the SOAP Adapter is based on J2EE).
2. About the digital signature. As a first solution, we had decided on accessing a webservice based on another machine running a signature application. We'd send the unsigned XML and receive a signed XML. But since that needed to be done into the BPM, I thought that using a piece of Java code in a mapping would suit it better.
But to be able to use the hashing/encrypting/encoding algorithms, which library needs to be installed? Is it the same SAP Java Crypto Lib that was installed for the SSL enabling?
Thanks in advance!

Hello Henrique,
1. You're right. For detailed instructions please have a look at the online help: http://help.sap.com/nw04 - Security - Network and Transport Layer Security - Transport Layer Security on the SAP J2EE Engine
2. The SOAP adapter supports security profiles. Please have a look at the online docu http://help.sap.com/nw04 -Process Integration - SAP Exchange Infrastructure - Runtime - Connectivty - Adapters - SOPA Adapter - Configuring the Sender SOAP adapter and from the link under Security Parameters to the Sender Agreement. You'll find some additional information in the following document: http://service.sap.com/~sapdownload/011000358700002767992005E/HowToMLSXI30_02_final.pdf
Rgds.,
Andreas

Adding Digital Signature to XML strings

Hello All ,
i'm looking for functionality to add digital signature, encoding & decording to XML Payment fiels with encryption as well.i have searched on SDN but i havn't found any solution.
waiting for some useful thoughts on it.
i have see Programs SSF* as well , but it requires PSE settings which i dont want to use .Is there any others ways to do it ?
Thanks & Regards
V.

Yes, you need a certificate to sign.
You need a special one for yourself, one that also contains your private key.
Your message is signed with your private key (actually encrypted with it), after that anyone can see you signed it using your public key.
Encryption works the other way round: You encrypt it with openly available public key of the recipient, but only he will be able to decrypt it with his private key.
BTW you can create your own certificate, using Keychain Access>Certificate Assistant. The disadvantage is that they are not automatically accepted as valid, since they are not listed in the X509Anchors keychain. You have (and whoever you deal with) manually import your (public) certificate into the Keychain X509Anchors as well. Double clicking the certificate gives you the option to do so.

Using a digital signature in 7.0 after it is created

I created a digital signature in Acrobat 7.0. I'll use it once to sign a document. When I create a new document and try to sign it, it says my password is incorrect. I know it is not incorrect as I had only created it barely 5 minutes before. And I wrote it down! What is going on? Do I need to recreate a new digital signature for every document I sign? I'm not using third party verification.
Thank you in advance for your thoughts and advice.

Most third party signature pads require two things.
1. An Acrobat plug-in
2. A device driver to connect the plug-in to device data being used for the signture.
Which third party Signature Pad are you using and which software are you using in conjunction with the Signature Pad.

Xfa Form, Digital Signatures, file attachments and Reader 9

Hi,
In reader 8 and previous, when i wanted to have a form that could be signed, passed to the next persons, added attachement signed, repeat, while maintaining the signatures valid, i could.
Since we updated to reader 9.12 all previously signed documents appear with invalid signatures and if i try to attach a file, the add button just isn't there.
If i follow he following steps:
Server side:
- Create PDF from xdp + xml (using forms).
- Assign Form Fillin, Digital Signatures and File Attachment (using Reader Extentions)
Client side:
- Populate the Form data
- Attach files
- Certifiy
- Sign (multiple Signatures)
It works fine, but it isn't the workflow i had in previous versions.
The workflow i have here is:
Server side:
- Create PDF from xdp + xml (using forms).
- Assign Form Fillin, Digital Signatures and File Attachment (using Reader Extentions)
Client side:
- Populate the Form data
- Attach files
- add Signature (only locks a collections of form fields)
- Repeat until everyone has attached their files and signed.
The problem is that this worked fine in versions before 9 (all digital signatures here validated with the yellow exclamation mark indicating new content), but in 9 and up what i get, after validating the signatures in reader, is a information indicating that the signatures are invalid because the document is either corrupt or has been changed.
Is this a bug or has this been changed from version 8 to version 9?
I've read the changelist of reader 9 and it talks nothing about this situation or Digital Rights other than form fillin, annotations and digital signtatures (the ones we can choose in the certification wizard of Acrobat Pro).
Any idea if its possible to implement the second scenario in reader 9, or even if its possible? Is there a guide on the practices Adobe garaties will allow to validate signatures in the following years? Even if it means usings PDFA.
Thanks in advance.

One last try.
You help would really be welcome in finding out the root cause of the difference in behaviour between reader 8 and 9 in this matter (bug or change).
I have no idea what documentation to read (since i've read the launch documentation and change list documentation) about reader 9, i've contacted Adobe 3 days ago (and the answer is silence, like usuall) and have no clear thought about what to say (without taking a huge risk by giving a uninformed answer) about this issue.
Thanks.

Digital Signatures and APEX

Has anyone had any success implimenting digital signatures (PKI) within APEX?
Here is a brief synapsis of what we are looking to accomplish and realize that third-party hardware/software might be necessary. We require users to login using LDAP credentials. We want them to be able to generate documents (i.e. PDF, Word, or Excel) from our application data. We want the users to have the ability to Digitally Sign their documents. We will be issuing individual private keys & certificates and we are considering generating the documents as XML. We are still in requirements gathering, but wanted to explore any and all capabilities within APEX.
Any thoughts? Thanks.

Hello Francesco,
I want to generate a digital signature (PKCS#7,XML) using SAP SSF API as explained in
http://help.sap.com/saphelp_nw04/helpdata/en/4f/65c3b32107964996a56e4165077e24/content.htm and in Amol Joshi's reply in
Digital Signatures and Document Encryption api
so my question is From which PI/XI version and its SPS this SAP SSF LIBRARY is supported ?
Kind Regards,
Kubra fatima.

Excel 2010 - Multiple Digital Signatures?

How would you add multiple digital signatures to an Excel 2010 workbook?

Hi,
To add multiple digital signatures, we need to create the signatures first.
Then please refer to the following steps:
Click the File tab.
Click Info.
Under Permissions, click Protect Document,
Protect Workbook or Protect Presentation.
Click Add a Digital Signature.
Read the Word, Excel, or PowerPoint message, and then click OK.
In the Sign dialog box, in the Purpose for signing this document box, type the purpose.
Click Sign.
Check the following MS link for additional information.
http://office.microsoft.com/en-us/excel-help/add-or-remove-a-digital-signature-in-office-files-HA010354308.aspx
Regards,
George Zhao
TechNet Community Support

Digital Signatures on TechNet Gallery - thoughts?

Similar Messages

Maybe you are looking for