cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Pilgrim

digital signing: certificate store

is it possible to configure installshield to use the certificate store instead of the pfx file?
Labels (1)
0 Kudos
3 Replies
Highlighted
Flexera
Flexera

Re: digital signing: certificate store

Not directly, although you may be able to replace the entry point (signtool.exe in our InstallShield\system folder) with an exe that reinterprets the command line parameters to use the certificate store instead.
0 Kudos
Highlighted
Pilgrim

Re: digital signing: certificate store

Our company believes that the certificate store is more secure and you can control the exportation of the credentials. You should really consider adding the feature instead of force installshield users to overwrite this exe. I think that'll make support issues more complicated when you send out an update.
0 Kudos
Highlighted
Flexera
Flexera

Re: digital signing: certificate store

Agreed; replacing that EXE is inelegant at best. (Although the odds of us replacing that file are really low, so it's more a concern that when you upgrade to a new major version, or install on a new machine, it won't sign correctly.)
0 Kudos