Click here to get back home

Code Signing Cert not trusted?
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Code Signing Cert not trusted? Mike Celone 10-19-2007
Posted by Mike Celone on October 19, 2007, 1:33 pm
Please log in for more thread options
 I have a Windows 2003 Standard Server installed as an Enterprise CA in my
root domain. I have granted my user account a Code Signing certificate
(using the built-in template) and successfully signed an Excel macro.
However when I open up the file with the certificate I am still prompted to
enable macros. Excel is stating that the digital signature is valid but
it's coming from a publisher that is not trusted. I have verified that on
my workstation the Enterprise CA is indeed in the Trusted Publishers store
(this is replicated to all machines in our domain) and the certificate is
valid on the CA. Why would it not be seeing this as from a Trusted
Publisher? I have tried this on two Vista machines and a XP SP2 machine.

Mike


Posted by Mike Celone on October 25, 2007, 10:08 am
Please log in for more thread options
Anyone?

>I have a Windows 2003 Standard Server installed as an Enterprise CA in my
>root domain. I have granted my user account a Code Signing certificate
>(using the built-in template) and successfully signed an Excel macro.
>However when I open up the file with the certificate I am still prompted to
>enable macros. Excel is stating that the digital signature is valid but
>it's coming from a publisher that is not trusted. I have verified that on
>my workstation the Enterprise CA is indeed in the Trusted Publishers store
>(this is replicated to all machines in our domain) and the certificate is
>valid on the CA. Why would it not be seeing this as from a Trusted
>Publisher? I have tried this on two Vista machines and a XP SP2 machine.
>
> Mike


Similar ThreadsPosted
Requesting Code signing cert from cert services November 4, 2005, 12:11 pm
Expired Code Signing Cert with VBScript September 12, 2006, 9:17 am
Several questions on code signing / smartcards / Win CA August 25, 2005, 4:24 am
2K3 Cert Svcs gives invalid policy error on OpenSSL gen'd cert req June 4, 2007, 1:56 pm
PKI: CA Signing Key Expiry and CRL Publication July 8, 2005, 7:41 am
Not certified for Certificate Signing October 12, 2005, 7:48 pm
Permanently disable SMB signing February 22, 2006, 8:09 pm
SMB signing on member server November 26, 2007, 12:40 pm
Signing an OpenSSL CSR with Microsoft Certificate Authority July 24, 2005, 10:33 am
Group Policy Options for Signing and Encryption November 30, 2005, 2:28 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap