cancel
Showing results for 
Search instead for 
Did you mean: 
LanceRas
Flexera beginner

Dual Code Signatures

January 1, 2016 is the Code Signing Armageddon.

As we still have to support Windows Vista and Server 2008, we need the ability to dual sign our installer and apps. Doing the apps is easy. Doing the Single file Setup EXE is fine. But I need to be able to dual sign the MSI before it is wrapped in the Setup.EXE.

Here is background on this from MS, who recommends dual signing and an article explaining as well.

http://social.technet.microsoft.com/wiki/contents/articles/32288.windows-enforcement-of-authenticode...

http://zabkat.com/blog/code-signing-sha1-armageddon.htm
Labels (1)
0 Kudos
1 Reply
AaronM
Pilgrim

Re: Dual Code Signatures

LanceRas wrote:
But I need to be able to dual sign the MSI before it is wrapped in the Setup.EXE.


Details in regard to why dual sign MSI is not supported was provided by Josh Stechnij (Software Engineer - Flexera Software: InstallShield Team) in another thread.
https://community.flexerasoftware.com/showthread.php?218163-Codesigning-using-SHA-2-SHA256&p=507778#...
0 Kudos