By using this site, you agree to our updated Privacy Policy and our Terms of Use. Manage your Cookies Settings.
424,854 Members | 1,871 Online
Bytes IT Community
+ Ask a Question
Need help? Post your question and get tips & solutions from a community of 424,854 IT Pros & Developers. It's quick & easy.

Obtain CA Certificate?

P: n/a
For some reason my application now requires that I "Sign the ClickOnce
manifests". I don't know that it ever has before. I clicked the "Create Test
Certificate" and after a reinstall everything is hunky dorey.

Now I am trying to obtain a certificate that is "trusted" and I don't know
how to go about doing that. I understand that my temporary certificate will
expire in a year, I'd rather go through the reinstall now rather than wait a
year and forget what needs doing.

That being said, can someone provide a link or information to where I can
obtain a trusted CA certificate? Sorry if this question is mind-bogglingly
simple.

--
stullhe104
Aug 4 '08 #1
Share this Question
Share on Google+
4 Replies


P: n/a
Good morning stullhe104

You had an accurate spot that a Certificate Authorities(CA) is only valid
for 12 months by default. Typically, certificate expiration would mean that
we need to re-sign the ClickOnce application every 12 months. However,
authenticode mitigates the need for this with support for time-stamping:

http://msdn.microsoft.com/en-us/libr...95(VS.85).aspx

The Timestamp Server URL feature allows you to supply a service that will
time stamp your manifest during the publishing process. When you sign a
ClickOnce deployment using a certificate, ClickOnce records the date and
time of the signing and embeds it in the deployment's digital signature. So
long as the deployment was signed when the certificate was still valid,
ClickOnce will allow the application to run even if the certificate has
since expired.

As for the time stamp service, Verisign, Inc. is an example of a CA that
provides this kind of service. You may use the following Timestamp server
URL:
http://timestamp.verisign.com/scripts/timstamp.dll

Alternatively, you may create a command-line assembly that updates the
certificate. A KB article has the provided sample code:
http://support.microsoft.com/kb/925521
It addresses how to renew a certificate created by ourselves.

In addition to that, I found some useful resources for you to look at
whenever you find free time. You might have come across these before but it
is just for your reference.

Managing ClickOnce publisher certificate files
http://www.softinsight.com/bnoyes/Pe...-3937-4d8d-81d
9-73cb6ae18eee

Signing your clickonce application with a certificate created by your own
CA root
http://bloggingabout.net/blogs/wasee...ng-your-clicko
nce-application-with-a-certificate-created-by-your-own-ca-root.aspx

ClickOnce Deployment and Authenticode
http://msdn.microsoft.com/en-us/libr...40(VS.80).aspx

Please DON'T hesitate to tell me if you have any other questions or
concerns.

Regards,
Jialiang Ge (ji****@online.microsoft.com, remove 'online.')
Microsoft Online Community Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
ms****@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscripti...ult.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscripti...t/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Aug 5 '08 #2

P: n/a
Hello Herb,

I am writing to check the status of the issue on your side. Would you mind
letting me know the result of the suggestions? If you need further
assistance, feel free to let me know. I will be more than happy to be of
assistance.

Have a great day!

Regards,
Jialiang Ge (ji****@online.microsoft.com, remove 'online.')
Microsoft Online Community Support

=================================================
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
ms****@microsoft.com.

This posting is provided "AS IS" with no warranties, and confers no rights.
=================================================

Aug 12 '08 #3

P: n/a
Sorry I have not replied. Other fires were burning brighter than this.

Thanks for the links, they have helped me a lot. I will have to get back to
this topic soon.
--
stullhe104
""Jialiang Ge [MSFT]"" wrote:
Hello Herb,

I am writing to check the status of the issue on your side. Would you mind
letting me know the result of the suggestions? If you need further
assistance, feel free to let me know. I will be more than happy to be of
assistance.

Have a great day!

Regards,
Jialiang Ge (ji****@online.microsoft.com, remove 'online.')
Microsoft Online Community Support

=================================================
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
ms****@microsoft.com.

This posting is provided "AS IS" with no warranties, and confers no rights.
=================================================

Aug 14 '08 #4

P: n/a
No problem. Please feel at ease to continue our discussion.

Have a nice day!

Regards,
Jialiang Ge (ji****@online.microsoft.com, remove 'online.')
Microsoft Online Community Support

=================================================
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
ms****@microsoft.com.

This posting is provided "AS IS" with no warranties, and confers no rights.
=================================================

Aug 15 '08 #5

This discussion thread is closed

Replies have been disabled for this discussion.