Digital Signatures

[prostetnic]

Just curious. Someone told me it was possible..but I never bothered to listen to how..

I have a local digital certificate issuing server in our WAN. I want to sign my MSI packets and use the ADS to say that only signed MSI packages may be installed. does this work?

[RajeshTammana]

I have not seen any option in Group Policy Editor to set this option.

Regards
Rajesh Tammana
InstallShield Software Corporation.

[Mike_Snyders]

It is only available on Windows XP.

It is under Computer Configuration -> Windows Settings -> Security Settings -> Software Restriction Polcies.

Check out "Designed File Types" and "Trusted Publishers"

Basically, you can set it up so that all MSIs cannot be run except those that are digitally signed using your certificate.