I am creating a msi installer for our product. I would like to digitally sign the .msi, setup.exe and all the binary files included in the build. Are we limited to using Verisign or Thawte as providers for the code signing digital ID? Is there an advantage using Verisign over other providers?
Any authenticode code-signing certificate that you can get in .spc+.pvk or .pfx format should do the trick, as long as it comes from a trusted CA. Note we recommend turning the .spc+.pvk como into a .pfx when possible.
