Question about certificates required for publishing a script extension!
Hi,
I'm in the latest steps of creating my new In-Design plugin and I was studying the ways I can publish it and Adobe Exchange looks like a good option, but here they are saying:
Paid Content must have a certified signature. (Content posted as Free will be accepted with a self-signed certificate.)Extension Manager should be able to verify the Producer’s signature. An application should be signed by a certificate issued by one of the following certificate authorities:
Chosen Security Thawte, Globalsign, Verisign, Comodo, Usertrust, Godaddy
And here, they say:
blah ... so that you know that a trusted authority certificate will no longer be required. ...
So, I'm a bit confused, my question is:
1. is it required really to have these certificates?!
2. If yes, how we are supposed to do this?
Any idea would be much appreciated,
thx, mim
Similar Messages
-
Questions about System Requirements for Adobe Air programs
Earlier today I asked someone who runs Tweetdeck if they knew what the system requirements were for running Tweetdeck on my desktop (Windows)
they gave me a link here: http://www.adobe.com/products/air/systemreqs/
and I found this:
Windows
2.33GHz Intel® Pentium® 4, AMD Athlon® 64 2800+, or faster processor
Microsoft® Windows® XP Home, Professional, or Tablet PC Edition with Service Pack 3; Windows Server® 2003 or 2008; Windows Vista® Home Premium, Business, Ultimate, or Enterprise (including 64-bit editions) with Service Pack 2; or Windows 7
512MB of RAM (1GB recommended)
Here are my computer statistics:
Operating System: Windows Vista™ Home Basic (6.0, Build 6001) Service Pack 1 (6001.vistasp1_ldr.101014-0432)
Language: English (Regional Setting: English)
System Manufacturer: Hewlett-Packard
System Model: Compaq Presario CQ60 Notebook PC
BIOS: PhoenixBIOS 4.0 Release 6.1
Processor: AMD Athlon Dual-Core QL-65 (2 CPUs), ~2.1GHz
Memory: 2814MB RAM
Page File: 1858MB used, 3993MB available
Windows Dir: C:\Windows
DirectX Version: DirectX 10
DX Setup Parameters: Not found
DxDiag Version: 6.00.6001.18000 32bit Unicode
Will me only having a 2.1GHz processor really affect how my performance is with Adobe Air products/apps in general?Yes- I've had some lower price pc's using an Adobe AIR app and can tell the difference.
Computers where performance was a huge issue was Compaq CQ56 & Toshiba Satellite C655D
These computers are under 2.0 GHz and the app seems to freeze up on occassion or run slower. -
Question about the requirement for goods issue from a delivery (VOFM)
Dear all
※Please note that this is related to the credit limit check.
I am trying to set up the SAP system, so that if the maintenance contract (rental document) is billed at least once,
the system would allow the user to bill the customer regardless of the credit usage (ex. 150%).
So I created the following routine for the credit check (in VOFM).
IF XVBAK-AUART = 'ZMZZ'. --> Please note that ZMZZ is the document type of our rental document
LOOP AT XFPLT.
IF XVBUK-FKSAK = 'B' or XVBUK-FKSAK = 'C'.
We will not do any credit limit check for this item line.
MOVE CHARX TO BYPASS-SECURITY.
MOVE CHARX TO BYPASS-STATIC_LIMIT.
MOVE CHARX TO BYPASS-DYNAMIC_LIMIT.
MOVE CHARX TO BYPASS-DOCUMENTVALUE.
MOVE CHARX TO BYPASS-CRITICAL_FIELDS.
MOVE CHARX TO BYPASS-REVIEWDATE.
MOVE CHARX TO BYPASS-OPEN_ITEMS.
MOVE CHARX TO BYPASS-OLDEST_OP.
MOVE CHARX TO BYPASS-DUNNING_LEVEL.
MOVE CHARX TO BYPASS-USER1.
MOVE CHARX TO BYPASS-USER2.
MOVE CHARX TO BYPASS-USER3.
EXIT.
ENDIF.
EXIT.
ENDLOOP.
ENDIF.
Now, with the routine above, it became possible to bill customers regardless of the credit usage.
However, when we try to ship (posting goods issue) the item for that maintenance contract, when the credit usage exceeds 100%, the system rejects it with the error message below.
<Error message>
Static credit check: credit limit exceeded
Now, I want to set up the system, so that if the posting goods is for the item which satisfies the following condition,
the system would not reject the posting due to the error above.
<condition>
1. The item is for the maintenance contract which was billed at least once --> this means that this is not a new contract
※Please note that for new maintenance contracts (which is not billed even once), the system should not allow to post goods
issue if the credit usage exceeds 100 %.
I looked into VOFM, and found out that we are using the following routines for posting goods issue.
<system routine>
13
<user routine>
113
But I didn't know where the error (Static credit check: credit limit exceeded) came from.
Could you tell me how to find (or where to modify) a location where I can make the modification in order to
satisfy our requirement?
Thank you very much in advanceDear all
I was able to solve the problem by setting up the credit check routine for delivery notes, and assign it for "No credit check" field
in the automatic credit control (OVA8).
So, thank you for your help, everyone
Takashi -
Certificate Requirement for Lync 2013 Standard Edition
I have successfully run the setup of lync 2013 standard edition now I am stuck due to certificates required for lync 2013. when I generate a csr. it show the subjected urls for that.
hostname.domain.com
sip.domain.com
diali.domain.com
meet.domain.com
admin.domain.com
lyncdiscover.domain.com
lyncdiscoverinternal.domain.com
im.domain.com (External URL)
so if I go for 3 party CA then I need 8 certicate only for internal lync. As I also need to connected federated partner and external user so I need Edge for again I need 3 more certificates
web.domain.com
a/v.domain.com
sip.domain.com
now when I go for these certificate it quit costly and I didn't understand why such certifcates required. can anyone help me to fix such requirement.
Or, what are the necessary url to which I buy 3 party CA rest leave as it is.
I also want to deploy Edge with single adopter as we have only one network so can anyone assist me to proceed it further.
Talha Faraz MalikTo save on the cost of your third party certificates, I would deploy an internal certificate authority to sign certificates for your internal front end. For your third party certificate, you would only need the SANs for the edge and for your
reverse proxy and as Edwin said, this can be a single cert with multiple SANs.
For example, for your edge you would need:
sip.domain.com
web.domain.com
You would not need A/V as this role does not require a SAN on your certificate. On the same certificate, which you could also use on your reverse proxy, you'd likely want the following FQDNs.
lyncdiscover.domain.com
im.domain.com (your external web services FQDN)
meet.domain.com
dialin.domain.com
You may also want to consider your internal web services FQDN and include the following so third party mobile devices can connect without needing a certificate installed:
im_internal.domain.com (your internal web services FQDN)
lyncdiscoverinternal.domain.com
I'm sure that's not entirely clear yet, so feel free to ask more questions or what the purpose of each is.
When you say Edge with a single adapter, you mean a single adapter in a DMZ or internal? You definably want two NICS, both in separate DMZs, but I've managed to get the edge working with a single adapter in a DMZ before. What you don't want is
the edge in your internal network.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs. -
Certificate Requirement for Microsoft RDS 2012
Hi All,
I planning to deploy RDS VDI and remote app service, Please help me to understand the certificate
requirement for server authentication, publication, SSO , etc.
Internet URL is
https://RDSVDI.domain.net
My servers are in .local
RD Licensing Server--------RDSLICSVR.Domain.LOCAL
RD Connection Broker-----RDSCB.Domain.LOCAL
RD Web Access------------RDSWEBSVR.Domain.LOCAL
RD Session Host-----------RDSSHSVR.Domain.LOCAL
RD Visualization Host-------RDSVHSVR.Domain.LOCAL
RD Gateway Server -------RDGWSVR.Domain.LOCAL
What kind of Certificate do i required to launch Desktop and RemoteApp without any error.Hi,
1. I would recommend a wildcard certificate (*.domain.net) purchased from a trusted public authority such as GoDaddy, VeriSign, Thawte, etc. This wildcard certificate would be used for all RDS purposes.
2. On the internal network you will need to create a DNS zone for domain.net with A records pointing to the private ip addresses, similar to the following:
rdsvdi.domain.net --> private ip address of your RD Web server
rdscb.domain.net --> private ip address of your RD Connection Broker
rdsgwsvr.domain.net --> private ip address of your RD Gateway server (this is only needed if you want to use RDG for internal users)
3. On the Internet you will need DNS records similar to the following:
rdsvdi.domain.net --> public ip address for your RD Web server
rdgwsvr.domain.net --> public ip address for your RD Gateway server
4. You will need to change the published FQDN for your RDS deployment to rdscb.domain.net using the cmdlet below:
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
5. You may need to modify your RD RAP in RD Gateway Manager. For example, you could edit the properties of the RD RAP, Network Resource tab, and select Allow users to connect to any network resource.
6. You should make sure that all client PCs have RDP 8.1 Client (6.3.9600) installed for best results connecting to Server 2012 R2.
7. For domain-joined PCs you may choose to set the SHA thumbprint of your certificate via group policy setting so that they will not be prompted when launching RemoteApps.
8. It is preferred for users to use IE to connect to RD Web Access and select the Private option if possible (as long as the PC is not public). When prompted they should Allow the Activex control to run.
-TP -
Hey all,
I have a question about feature licensing for Cisco ISR 1800, 2800, 3800, 2900 series. I know there are differences between all of the series. My main question which applies for all the Cisco ISR series is this:
"If I want to upgrade the IOS to a newer version and upgrade from the basic feature set, do I need to get a license from Cisco? "
If yes:
And if so, how do I go about purchasing a license? Is a support contract needed?
Again, I need to know for each Cisco ISR series. I'd appreciate any help on this.
Thanks,
JohnYou probably want to reach your SE/AM about this so they can explain you exactly how this works, maybe some sales material, or you can also reach pre-sales.
-
Hi, I have answered no to the question about saving password for one spesific site. I have changed my mind and would like Firefox to save the password. How do I reactivate the password saver for one spesific site?
Check exception list of your Firefox password Manager and check if your site is there or not?
* http://kb.mozillazine.org/User_name_and_password_not_remembered#Password_Manager_settings -
Lync 2013 certificate requirements for multiple SIP domains
Hi All,
I am engaged with a client in respect of a Lync 2013 implementation initially as a conferencing platform with a view to enabling EV functions (inc. PSTN conferencing) in the future. They initially need to support 30 SIP domains and eventually
around 100 SIP domains which is proving to be either not possible or severely cost prohibitive. Their current certificate provider, Thawte, can only support up to 25 SANs and have quoted them 5 figures. We tend to use GeoTrust as they are cheaper but they
appear to have a limit of 25 SANs. GoDaddy appear to support up to 100 SANs for a pretty reasonable cost. My questions are as follows:
Is there a way that I’m missing of reducing the number of SANs required on the Edge server?
Use aliases for access edge FQDNs - Supported by desktop client but not by other devices so not really workable
Don’t support XMPP federation therefore removing the need for domain name FQDNs for each SIP domain
Is there a way that I’m missing of reducing the number of SANs required on the Reverse Proxy server?
Friendly URL option 3 from this page:
http://technet.microsoft.com/en-us/library/gg398287.aspx
Client auto-configuration:
i.
Don’t support mobile client auto-configuration in which case no lyncdiscover.sipdomain1.com DNS records or SANs would be required.
ii.
Support mobile client auto-configuration over HTTP only in which case CNAME records are required for each SIP domain (lyncdiscover.sipdomain1.com, etc. pointing to lyncdiscover.designateddomain.com) but no SANs are required.
iii.
Support mobile client auto-configuration over HTTPS in which case DNS records are required for each SIP domain and a SAN entry for each SIP domains is also required. This is because a DNS CNAME to another domain is not supported over
HTTPS.
If the answer to 1 and/or 2 is no, are there certificate providers that support over 100 SANs?
How do certificate requirements differ when using the Lync 2013 hosting pack? I would think that this issue is something that a hosting provider would need to overcome.
Would the Lync 2013 Hosting Pack work for this customer? The customer uses SPLA licensing so I think is eligible to use the hosting pack but not 100% sure it will work in their environment given that client connections are supposed
to all come through the Edge where their tenants will be internal and also given the requirement for an ACP for PSTN conferencing.
Many thanks,Many thanks for the response.
I was already planning to use option 3 from the below page for simple URLs to cut down on SAN requirement.
http://technet.microsoft.com/en-us/library/gg398287.aspx
What are the security concerns for publishing autodiscover over port 80? I.e. Is this only used for the initial download of the discovery record and then HTTPS is used for authentication? This seems to be the case from the following note on the below page:
http://technet.microsoft.com/en-gb/library/hh690030.aspx
Mobile device clients do not support multiple Secure Sockets Layer (SSL) certificates from different domains. Therefore, CNAME redirection to different domains is not supported over HTTPS. For example, a DNS CNAME record for lyncdiscover.contoso.com that redirects
to an address of director.contoso.net is not supported over HTTPS.
In such a topology, a mobile device client needs to use HTTP for the first request, so that the CNAME redirection is resolved over HTTP. Subsequent requests then use HTTPS. To support this scenario, you need to configure your reverse proxy with a web publishing
rule for port 80 (HTTP).
For details, see "To create a web publishing rule for port 80" in Configuring the Reverse Proxy for Mobility. CNAME redirection to the same domain is supported over HTTPS. In this case, the destination domain's certificate covers the originating
domain.”
I don’t think SRV records for additional SIP domain access edge is a workable solution as this is not supported by some devices.
As per the below article:
http://blog.schertz.name/2012/07/lync-edge-server-best-practices/
“The recommended approach for external client Automatic Sign-In when supporting multiple SIP domains is to include a unique Access Edge FQDN for each domain name in the SAN field. This is no longer a requirement (it was in OCS) as it is possible to
create a DNS Service Locator Record (SRV) for each additional SIP domain yet have them all point back to the same original FQDN for the Access Edge service (e.g. sip.mslync.net).
This approach will trigger a security alert in Windows Lync clients which can be accepted by the user, but some other clients and devices are unable to connect when the Automatic Sign-In process returns a pair of SRV and Host (A) records which do not share
the same domain namespace. Thus it is still best practice to define a unique FQDN for each additional SIP domain and include that hostname in the external Edge certificate’s SAN field”.
===================
1. Basically the requirement is to initially provide Lync conferencing services (minus PSTN conferencing) to internal, external, federated and anonymous participants with a view to providing PSTN conferencing and therefore enterprise voice services later.
2. The customer currently supports close to 100 SMTP domains and wants to align their SIP domains with these existing domains. The structure of their business is such that “XXX IT Services” provide the IT infrastructure for a collection of companies who
fall under the XXX umbrella but are very much run as individual entities.
Question:
Would you agree that I’m going to need a SAN for every SIP domain’s access edge FQDN?
Thanks. -
Is KM required for 'publish to EP6' - portal content & role?
is KM required in EP for 'publish to EP6' - portal content & role? we are not try to publish to KM catalog, etc. just the portal content and role. does KM required for that?
Thanks
JaneHi Jane,
of course I cannot speak for everyone here, but, sorry, I personally do not understand your question.
Is KM required for what?
Regards, Karsten -
Question about firefox permissions for sites
i have a question about sites permissions
in google chrom it is easy to set permission for each site like (java, flash plugin, image , ...)
http://i58.tinypic.com/nl66v9.png
but i prefer to use firefox
is there any addon or something else to have this options in firefox ?You can inspect and manage the permissions for the domain in the currently selected tab via these steps:
*Click the "[[Site Identity Button|Site Identity Button]]" (globe/padlock) on the location/address bar
*Click "More Information" to open "Tools > Page Info" with the Security tab selected
*Go to the Permissions tab (Tools > Page Info > Permissions) to check the permissions for the domain in the currently selected tab
You can inspect and manage the permissions for all domains on the <b>about:permissions</b> page.
*https://support.mozilla.org/kb/how-do-i-manage-website-permissions -
Question about the packages for OS Linux
Hi all,
this is little weird question but I could not find the answer on net so trying to get some out here:
I need to have list of package requires for oracle (9.2.0.4 & 10.2.0.4) vesion for OS Linux
I know it is old versions of oracle but app and management requires this soon!! please guide!!
thanksHi,
Below note mentioned required packages
Requirements For Installing Oracle10gR2 On RHEL 5/OEL 5 (x86_64) (Doc ID 421308.1)
For oracle 9i, below packages are required
$ rpm –q make-3.79.1
$ rpm –q gcc-3.2.3-34
$ rpm –q glibc-2.3.2-95.20
$ rpm –q compat-db-4.0.14-5
$ rpm –q compat-gcc-7.3-2.96.128
$ rpm –q compat-gcc-c++-7.3-2.96.128
$ rpm –q compat-libstdc++-7.3-2.96.128
$ rpm –q compat-libstdc++-devel-7.3-2.96.128
$ rpm –q openmotif21-2.1.30-8
$ rpm –q setarch-1.3-1
Kernel parameters
Kernel
Parameter Setting To Get
You Started Purpose
Shmmni 4096 Maximum number of shared memory segments
Shmall 2097152 Maximum total shared memory (Kb)
Shmmax 2147483648 Maximum size of a single shared memory segment
Semmsl 250 Maximum number of semaphores per set
Semmns 32000 Maximum number of semaphores
Semopm 100 Maximum operations per semop call
Semmni 128 Maximum number of semaphore sets
file-max 65536 Maximum number of open files
ip_local_port_range 1024 - 65000 Range of ports to use for client connections
rmem_default 1048576 Default TCP/IP receive window
rmem_max 1048576 Maximum TCP/IP receive window
wmem_default 262144 Maximum TCP/IP send window
wmem_max 262144 Maximum TCP/IP send window
For more information kindly refer installation guide
Thanks,
Krishna -
HT3702 Hi I would like to ask a question about my billing for some things
I would like to ask a question about my billing
This is not Apple. These are user forums. Questions about billing, credit cards, etc. should be addressed directly to Apple.
Apple Store Customer Service at 1-800-676-2775 or visit online Help for more information.
To contact product and tech support visit online support site.
For Mac App Store: Mac App Store Customer Service.
For iTunes: Apple Support for iTunes - Contact Us -
Question about Original Batch for IS-Mill
Dear guru.
I must assign more than one original batch to a production order. Can i do this?
Thanks.Hi,
It is not possible to assign 2 batch numbers to a product coming out of a production order.
I am still not very clear about your requirements.
However, I come across requirements of using only one RM batch in a FG batch (not vice versa). This can be achieved. You need to do an enhancement which runs at the time of reservation/component batch determination/process order release. It reduces the quantity of FG as per available quantity of RM and may create a new proction order for remaining quantity.
Thanks
Ashutosh -
Basic Question Solaris SPARC required for 10.2 upgrade from 9.2
We are running Oracle 9.2 releases on Windows and Solaris SPARC 2.6
SUN 450 Dual UltraSparc II
Where can I find system and OS requirements for Solaris for Oracle 10.2
database? I have looked in many different install guides and they all
reference Solaris 10 but don't say whats required.You find this information here:
http://www.oracle.com/technology/support/metalink/index.html
For 10g at least you need Solaris 2.8
Werner -
What are the requirements for publishing an App for private distribution, not sale.
I need to create an App in English and 4 other languages for private distribution to individuals. What are the requirements for doing this please? I currently have a just a Single Edition license. Am I right in understanding I need a Cloud subscription and an Apple Developer subscription also?
My client desire is to only make their accessible to paying members requiring a sign–in before download. Does this fall into a private distribution deployment.
Maybe you are looking for
-
I erased my main drive: how to install Mavericks?
I was running Yosemite Beta on my iMac, but it was acting funny. A dialog told me to back it up and erase and reinstall. I copied the internal drive to a FireWire drive as a clone. Then I booted from the firewire drive. Then I did something very stup
-
Extending Bilevel Partition - SAP Lumira Extensions
Hi All, Has anyone tried extending the Bilevel Partition? http://bl.ocks.org/mbostock/5944371 Also is it mandatory to have the data in CSV format? Can't we just use the JSON object? for example: the flare.json that has been used here If I try uploadi
-
Fan Speeds, and Mirror Raid with New Internal Hard Drive
Regards, I recently installed and formatted a new hard drive in my PowerMac dual 2.3 ghz computer and I have a few questions. 1. Now that there are two hard drives do I need to do anything to ensure that the fan on my computer can keep them cool? I t
-
Map Coord, Tile , problems with getting tile for a coord
Hello, I got a following question of which i unfortunately don't see the answer ... I've a class Coordinate and a class Tile. Now when i'm loading the tiles, format: x y z color ... i put them in a Map Map<Coord, Tile>, where coord is x,y,z and Tile
-
Hi, I started to get the following error every time I open Firefox. The message is chrome://webvideodownloader/content/webvideodownloaderbar.js:172 I started getting this message when I updated to Firefox 5. Every time, and I mean this literally, I o