Windows 7 Comparability for SHA-256 (Code Signing)

Dear All
I want to know when the update for windows 7 (SHA-256 Code Signing Comparability -- for Kernel driver) will be available?

Hi,
I'm not sure whether you know this update KB 2949927, Microsoft is announcing the availability of an update for all supported editions of Windows 7 and Windows Server 2008 R2 to add support for SHA-2 signing and verification functionality.
http://support.microsoft.com/kb/2949927
Microsoft Security Advisory 2949927
https://technet.microsoft.com/en-us/library/security/2949927.aspx
This blog can also be helpful
Microsoft Security Advisory 2949927
http://blogs.technet.com/b/pki/archive/2010/09/30/sha2-and-windows.aspx
Yolanda Zhu
TechNet Community Support

Similar Messages

Managing Windows Phone's and Symantec Code Signing certificate

Hi,
We need to renew the code signing certificate from Symantec. However, we only use it to manage the Windows Phone devices and don't publish apps. Do we still need to spend $300 on renewing this cert? Can't I manage them for free like our iOS and Android devices?

You REQUIRE the Symantec Code Signing Certificate to manage Windows Phones via Windows Intune. This is a requirement of the device rather than the management solution.
You CAN manage Windows Phones without this cert using only Exchange active sync management in Intune. However this management is very basic and has no advanced features (basically the features provided by Exchange rather than Intune).
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

How to generate csr for third party code signing cert?

I've been reading about code signing, but can't see how to generate a csr to use with a third party CA. Does someone have a tutorial, link, suggestion?

Hi,
Here is an document which discussed on how to implement code signing with using third party certificate for you reference:
http://download.microsoft.com/download/a/f/7/af7777e5-7dcd-4800-8a0a-b18336565f5b/best_practices.doc
For further suggestions, it is recommend you to get further support in the MSDN Forum so that you can get the most qualified pool of respondents.
http://social.msdn.microsoft.com/forums/en-US/categories/
Thanks
Tiger Li
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Code-signing Certificate Provider for Mavericks Server?

Our Digicert Code Signing Certificate [which worked fine in Mountain Lion Server but doesn't work in Mavericks Server no matter what I try] is about to expire, and I'm wondering if anyone could recommend a vendor whose code-signing certificates definitely work with Mavericks Server?

I have just created a self-signed code-signing certificate, I used XCA to generate it which is a front-end for openssl. Obviously being generated from a self-signed rootCA it is not going to be trusted by the outside world but it is good enough for an internal Profile Manager setup since the enrollment process will automatically trust your own self-signed rootCA.
Anyway, when trying to install it I did come across a gotcha which might help you and others here. I found that if I imported the certificate in to Keychain Access e.g. by double-clicking on it, then Server.app did not list it as an available certificate for Profile Manager code-signing. However if instead I used the option in Server.app under Profile Manager to import the code-signing certificate it was accepted.
In theory importing via Keychain Access should work as well but it did not, so if you have been doing it that way try importing via Server.app instead.
If you have already imported it via Keychain Access just delete it from your Keychain and try again.
With regards to the suggestion from ajm_from_WA for buying one from www.ssls.com I could not find any code-signing certificates listed on their website. These are different to ordinary website certificates.

Code Signing Certificate Options

Hi Guys,
Have just finished and Air application and need to sign it before distribution. Anyone got any good advice on the pros and cons of the various Code Signing options for Adobe Air out there?
Richard

I have just created a self-signed code-signing certificate, I used XCA to generate it which is a front-end for openssl. Obviously being generated from a self-signed rootCA it is not going to be trusted by the outside world but it is good enough for an internal Profile Manager setup since the enrollment process will automatically trust your own self-signed rootCA.
Anyway, when trying to install it I did come across a gotcha which might help you and others here. I found that if I imported the certificate in to Keychain Access e.g. by double-clicking on it, then Server.app did not list it as an available certificate for Profile Manager code-signing. However if instead I used the option in Server.app under Profile Manager to import the code-signing certificate it was accepted.
In theory importing via Keychain Access should work as well but it did not, so if you have been doing it that way try importing via Server.app instead.
If you have already imported it via Keychain Access just delete it from your Keychain and try again.
With regards to the suggestion from ajm_from_WA for buying one from www.ssls.com I could not find any code-signing certificates listed on their website. These are different to ordinary website certificates.

No option in project info window for code signing Provising profile.

Dear Developer forum,
I have one issue wth my application regarding provisional Profile.
I have installed Distribution certificate.After that I have entered all information regarding distribution provisional profile in program portal
I have got provisional certificate from portal.I have installed it
And I have also seen its entry in home/library/mobiledevices/.
But Now problem is arising at place when I am opening my project or target info window on that time in BUild->code signing option, I have only code signing endity but no code signing provisioning profile.
where I can give my distribution provising profile name
So anybody tell me howz it come????
Thanks

Looking at this page:
http://developer.apple.com/iphone/manage/distribution/index.action
Make sure that you've done all the steps... "Generating a Certificate Signing Request", "Submitting a Certificate Signing Request for Approval", "Downloading and Installing iPhone Distribution Certificates", "Create and download your iphone distribution provisioning profile"...
When I went through this process, I think I forgot to do the step "Downloading and Installing iPhone Distribution Certificates"... (skipping straight to "create and download your iphone disbritution profile") as a result the provisioning profile name wasn't appearing for me to select... When I completed that step, then the provisioning profile name appeared...
Message was edited by: iphonemediaman

Code Signing a Director 12 App for the AppStore

I have seen a few discussions on this topic and signing and submitting to the AppStore while full of challenges was possible with Director 11.
With Director 12, we have been unable to code sign the projector.
We use the Terminal to do it:
codesign -f -v -s "3rd Party Mac Developer Application: Developer's Name" [path to .app]
We get the following error:
/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/cod esign_allocate: the __LINKEDIT segment does not cover the end of the file (can't be processed) in: /Users/OurApp.app/Contents/MacOS/OurApp
/Users/OurApp.app: code failed to satisfy specified code requirement(s)
Any ideas would be welcome!
Additionally:
I have just discovered that unless Director is updated any submissions to the Apple App Store will be refused because of the use of the QuickTimes APIs
Deprecated API Usage - Apple no longer accepts submissions of apps that use QuickTime APIs.

There isn't a way to save as an earlier version, but my article from 13 years ago still holds true:
http://www.director-online.com/buildArticle.php?id=1034
The article tells you how to find two copies of a particular pair of numbers. For D7 those numbers would be 057E, D8 would be 0640, and D8.5 is 073A. Changing the two places where those number are will make the DIR open in older versions of Director.
The numbers for D11.5 are 0782, and for D12 they are 079F. So, track down the two places where 079F are (which are 18 positions apart) and change them to 0782, and you'll be able to open the file in D11.5.
One change since I wrote that article is that the identification sequence is now the Windows one on Mac too, most likely because it's an Intel app now. So, the number sequence to look for to get close to those two numbers is 46 43 52 44. In the file I checked there were three places where those numbers were, and it's the last of the places that followed by the two numbers, about 8 & 26 bytes later.

Code signing Windows Store Apps

I can't get a very clear answer on the code signing requirement for deploying Windows Store Apps to the app store, even after searching the Internet for a couple of days. Specifically, my question is: are you required (not just recommended) to have a third
party Code Signing Certificate to publish to the Windows App Store?
I am not distributing the app to internal customers, but rather to external customers via the app store. If I'm missing this requirement documented in the documentation available on this site, can you point me to it?
Michael

All methods of deployment (Windows Store, PowerShell or System Center Configuration Manager) require the application to be signed using a certificate. The Windows Store channel requires a signing certificate
from a publicly trusted CA because, well, the testers in the approval process won't have access to your internal PKI.
Visual C++ MVP

What code signing certificate has to be added for Adobe Air Native Installer?

Hi,
I'm developing Adobe Air application. I need to digitally verify the application to add the publisher's name with the product. I did a little research and came to know that Symantec, Thawte, Comodo, Comodo-Tucows, Digicert, Godaddy and couple of others are doing this.
Yes. I'm talking about the Code Signing Certificate. My question is, What code signing certificate has to be added for Adobe Air Native Installer? The reason is, The native installer will have an extension .exe ( Windows ) and .dmg ( MAC OS X ).
These guys are providing certificate for Adobe Air. For instance, If the application is exported using Native Installer in Windows, The application will have an .exe extension. For this, Can I use the same Adobe Air code signing certificate or Should I go for Microsoft Autheticode ( for .exe ) certificate?
Thanks in advance.

I think comodo code signing certificate is one of the nice option to be added for Adobe Air, as i have seen comodo code signing certificate in other adobe programs. Recently i bought comodo code signing from https://cheapsslsecurity.com/comodo/codesigningcertificate.html, to sign one of my adobe application and it works fine, you can use microsoft authenticode technology with comodo code signing.

Adt code sign GateKeeper rejection for OS X AIR app

I'm having a problem getting a signed OS X AIR captive runtime bundle app to pass the GateKeeper signature smell test.
Here are the digestible facts, in list format:
- App is multi-platform OS X, Windows, iOS, Android, but let's just focus on OS X for now.
- Application is a standalone captive runtime bundle app.
- Dev machine running OS X 10.9.5 (with Xcode 6.0.1).
- Built with AIR 15.0.0.258 Beta.
- The certificate is a certificate from comodo.com guaranteed to work with AIR and OS X Digital Code Signing, Code Signing Certificates - COMODO
- Tried compiling/packing with IntelliJ IDEA 14 beta and adt command line, both with same fail results.
- Manual packaging method used: Adobe AIR * Packaging a captive runtime bundle for desktop computers
The adt command fires without a hitch, the command asks for the p12 password, I can see the certificate authorities get pinged as the packaging progresses. The resulting app seems fine and runs well with GateKeeper disabled. However, GateKeeper does not like the resulting app. I need this app to launch flawlessly on all user's systems (that's why I bought a certificate).
Here's the disappointing results from Terminal:
spctl -a -t exec -vv myPrettyPony.app
rejected
source=no usable signature

I would suggest that those interested take a look at thread Tutorial on publishing Flex/Air app for Mac App Store or just using Developer ID for general distribution
However, since that thread is marked as answered, I want to leave this thread open until I find an answer to my particular question: What are the exact steps to properly package and codesign an OS X AIR app for independent distribution to OS X 10.9.5?

Windows Code Signing Certificate

How to convert Windows Code Signing Certificate from p7s format to AET format

Where did you get this 'p7s' file? Did someone try to send you an AET in an SMIME encoded message?
File extension: p7s, is usually associated with a file containing PKCS #7 signed data and 'AET' usually refers to an 'Application Enrollment Token', which is associated with Windows Phone Enterprise application management.
To create an AET for Windows Phone you need to have a proper code signing certificate from Symantec. (...you can't use just any code signing certificate.)
When you obtain a code signing certificate from Symantec it should be installed into your computers certificate store. You can then export the certificate and private key to a *.pfx file to use for signing apps or if you need to move it to a different
computer.
see:
Windows Phone 8: Steps to acquire an Enterprise Mobile Code Signing Certificate required to sign LOB or company apps
and:
Frequently asked questions about Windows Phone Company Hub apps
Eric Fleck, Windows Store and Windows Phone Developer Support. If you would like to provide feedback or suggestions for future improvements to the Windows Phone SDK please go to http://wpdev.uservoice.com/ where you can post your suggestions and/or cast
your votes for existing suggestions.

Pop up window asks for password to access os x applications: how to bypass necessary signing in?

pop up window asks for password to access os x applications: how to bypass annoying signing in?

Mac OS X v10.6: Mail.app won’t open, or "You can't use this version of Mail…" alert after installing Security Update 2012-004:
http://support.apple.com/kb/TS4424?viewlocale=en_US&locale=en_US
Fellow user Grant Bennet-Alder offers this solution:
Some users have reported this problem if the Mail Application has been moved out of the top-level /Applications folder, or duplicated in another location.
When the Security Update is done, the old version of Mail is disabled.
The solution has been to:
1) make certain Mail is in the /Applications folder
2) There is no other copy anywhere else.
3) Once steps 1 and 2 have been done, Manually download and re-apply the Security Update (2012-004) by hand.
Security Update 2012-004 (Snow Leopard)
If the Mail.app has been LOST, it can be re-installed by applying the 10.6.8 version 1.1 combo update. But this update is quite large and it is usually not necessary:
Mac OS X 10.6.8 Update Combo v1.1

Two questions: how do Skype and iChat compare for group video? quality, reliability, cost, etc are important. 2) Is my MobileMe ID what I need to use in the window in making an iChat buddy? It only says AIM above the window, online tutorial differs.

Two questions: 1) How do Skype and iChat compare for group video? Quality, reliability, cost, etc are important. 2) Is my MobileMe ID what I need to input in the window in making an iChat buddy? It only says AIM above the window, online tutorial differs, saying MobileMe, AIM, GoogleTalk (Jabber) all work. Thnx

Hi,
IChat uses better Video Compression than Skype does.
On a top flight Mac you can send a 640 X 480 pixel frame up to 30 frames a sec.
Skype can't match this.
iChat in Video is Peer to Peer. (you can actually Log out of the Buddy list)
Skype seems to borrow something from everyone's bandwidth to make connections.
What do you mean by Business account Tracking ?
iChat Adds (or can add) the First Name, Last Name of your Buddies and create an Address Book Entry
Whether you mark those cards connected with a company is up to you.
(I have heard of issues with earlier version of iChat and the Address Book that "saw" the Company Name as the part of the Name and linking several Screen Names to the one name
Audio on a Mac using Skype tend to be the same as the streaming needs are less.
However you have to rely on any PCs audio abilities from PCs which may not be to the same standard.
Mac to PCs in iChat and AIM can be difficult though. (It should work but it rarely as simple as Plug and go)
Skype may suit your needs better on ocassions.
9:11 PM Thursday; May 5, 2011
Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb( 10.6.7)
, Mac OS X (10.6.7),
"Limit the Logs to the Bits above Binary Images."  No, Seriously

Code Signing Cert for AIR and MSI

If a Code Signing Certificate for AIR is purchased, can that same certificate be used when distributing the package using MSI?
Or does it not matter as long as the AIR app is signed?

No, this was a different problem that created similar symptoms.
I just found out that, since Director 11.5, we can put the Xtras folder inside a projector. I was relying on outdated documentation, both online and in my mind, which said the xtras had to be next to the projector.
Weirdly, putting the Xtras folder inside the Contents folder (inside the bare stub projector) solved the problem I was having: my sound was not functioning after I code signed the xtra that enables sound. Now it works fine.
I also created an error when my projector's INI file set Movie01 to a Director movie in the same folder as the projector. Now I have it instead point to a movie in the Resources folder of the projector. So maybe I will just throw all my movies and supporting files in the Resources folder.
I too am thinking of documenting the process, once I know customers are buying my app and using it successfully. Maybe I'll use screen recording to create a set of YouTube tutorials. That can spare others from this confusion and aggravation, and encourage people to buy the latest version of Director and update their old products. The more money that Adobe earns from Director, the more they will be encouraged to invest in developing Director further.
If Apple will accept apps without receipt validation, that will certainly simplify things. I saw an Apple web page that stated it was mandatory, but that page has been changed. Maybe validation is optional but no longer required.
For details, check this:
https://developer.apple.com/library/mac/releasenotes/General/ValidateAppStoreReceipt/Intro duction.html
but luckily there is source code out there that can be used to handle those technical details.
I'm wondering how you applied your set of icons to your bare stub projector. Did you simply replace the projector.icns file? I created an error when I tried that.

Code Signing for MacOS 10.8+

Anyone have a sample build setup for signing the .app file before creating the DMG? How to make this part of the build process?
I have an Apple developer id, but wondering how to integrate signing in the JavaFX build process (native bundles)

I have something like this which gives me a signed app bundle (.app). I then manually create a DMG using DMG Canvas.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<project name="testMacOSXBuild"
              default="default"
           basedir="."
           xmlns:fx="javafx:com.sun.javafx.tools.ant">
    <target name="default">
     <fx:jar destfile="${dist.dir}/${out.jar}">
     </fx:jar>
     <fx:deploy width="${applet.width}"
                  height="${applet.height}"
                  verbose="true">
     </fx:deploy>
         
         <exec executable="/bin/bash">
              <arg value="scripts/mac/code_sign.sh"/>
         </exec>
    </target>
</project>

Windows 7 Comparability for SHA-256 (Code Signing)

Similar Messages

Maybe you are looking for