Link to home
Start Free TrialLog in
Avatar of CipherIS
CipherISFlag for United States of America

asked on

VB.NET 2008 Winforms Signing

I am looking at the signing of a .NET application.  It says:

"This CA Root certificate is not trusted because it is not in the Trusted Root Certification Authorities store."

Screenshots below are of the signing in .NET 2008.

User generated image
User generated image
Below are the license files.  Looks like they were purchased.  

User generated image
When a user in tries to install the app it gets blocked by windows and they have to allow it.

How do I resolve this issue so when the application is installed it is not blocked by Windows.  Also, looking at the licenses how can I tell if it was purchased?

Thanks
Avatar of Vadim Rapp
Vadim Rapp
Flag of United States of America image

Do what it says: install this certificate in the trusted root certification authorities store. Double-click the certificate, it will start the wizard, and when it asks what store to install into, change default "automatic" to  trusted root certification authorities.
SOLUTION
Avatar of Vadim Rapp
Vadim Rapp
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of CipherIS

ASKER

Where do I double click
I opened MMC then moved the certificate from the locations it resided in

Intermediate Certificate Authorities \ Certificates

To

Trusted Root Certification Authorities \ Certificates

No it is trusted.  The question I have is if I build the application and users update will that solve the issue?

Trying to get around the below error on install.
InstallError.jpg
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Trying to follow the steps in the link you provided.  Here are the instructions.

************************************************
Expand the Certificates root, and right-click Personal.
From the All Tasks menu, select Request New Certificate, as the Screen shows.

Click here to view image

Click Next in the Certificate Request Wizard dialog box.
Select the Administrator template, and click Next.
Enter a user-friendly name and description, and click Next.
Click Finish when the confirmation screen displays.
When the dialog box displays to confirm the certificate creation, click Install Certificate.
Finally, click OK in the success dialog box.
************************************************

I followed the following steps:
1.  Expand the Certificates root, and right-click Personal.
2.  From the All Tasks menu, select Request New Certificate, as the Screen shows.
3.  Click Next in the Certificate Request Wizard dialog box.
4.  Select the Administrator template, and click Next.

On step 4 I don't see an administrator template.  Also, the dialogue screen is asking for URL which I don't have.  I have a file.  

How do I move forward?
User generated image
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I have the certificate file in the /Trusted Root Certificate Authorities/Certificate as highlighted in blue below.

User generated image
If you have it there, then on this particular computer it's trusted, and there should be no security alerts when you run an executable or installation signed by this certificate. To make it trusted on other computers, you either have to repeat the same process, i.e. importing the certificate into trusted root certification authorities, on each computer, or to put the certificate into the domain group policy that applies to these computers.
Is there an example of how to put it into the domain group?
Here's Microsoft article:

Manage Trusted Root Certificates
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial