cancel
Showing results for 
Search instead for 
Did you mean: 
TurboFisch
Pilgrim

digital signing: certificate store

is it possible to configure installshield to use the certificate store instead of the pfx file?
Labels (1)
0 Kudos
3 Replies
Flexera MichaelU
Flexera

Re: digital signing: certificate store

Not directly, although you may be able to replace the entry point (signtool.exe in our InstallShield\system folder) with an exe that reinterprets the command line parameters to use the certificate store instead.
0 Kudos
TurboFisch
Pilgrim

Re: digital signing: certificate store

Our company believes that the certificate store is more secure and you can control the exportation of the credentials. You should really consider adding the feature instead of force installshield users to overwrite this exe. I think that'll make support issues more complicated when you send out an update.
0 Kudos
Flexera MichaelU
Flexera

Re: digital signing: certificate store

Agreed; replacing that EXE is inelegant at best. (Although the odds of us replacing that file are really low, so it's more a concern that when you upgrade to a new major version, or install on a new machine, it won't sign correctly.)
0 Kudos