cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
LanceRas
Level 7

Dual Code Signatures

January 1, 2016 is the Code Signing Armageddon.

As we still have to support Windows Vista and Server 2008, we need the ability to dual sign our installer and apps. Doing the apps is easy. Doing the Single file Setup EXE is fine. But I need to be able to dual sign the MSI before it is wrapped in the Setup.EXE.

Here is background on this from MS, who recommends dual signing and an article explaining as well.

http://social.technet.microsoft.com/wiki/contents/articles/32288.windows-enforcement-of-authenticode-code-signing-and-timestamping.aspx

http://zabkat.com/blog/code-signing-sha1-armageddon.htm
Labels (1)
0 Kudos
(1) Reply
AaronM
Level 6

LanceRas wrote:
But I need to be able to dual sign the MSI before it is wrapped in the Setup.EXE.


Details in regard to why dual sign MSI is not supported was provided by Josh Stechnij (Software Engineer - Flexera Software: InstallShield Team) in another thread.
https://community.flexerasoftware.com/showthread.php?218163-Codesigning-using-SHA-2-SHA256&p=507778#post507778
0 Kudos