What is a Code Signing Certificate? Why is important?

The code signing certificate acts as a digital signature, confirm the software author and guarantee that the code has not been altered or corrupted since it was signed. Eliminate “Unidentified Publisher” warnings.

Code signing is widely used to protect software that is distributed over the Internet. Code signing does not alter it; it simply appends a digital signature to the executable code itself. Use digital signatures when you want to distribute data, and you want to assure recipients that it does indeed come from you. This digital signature provides enough information to authenticate the signer as well as to ensure that the code has not been subsequently modified.

Code Signing Certificate

Microsoft accepts standard code signing and extended validation (EV) code signing certificates from partners enrolled and authorized for Kernel Mode Code Signing as part of the Microsoft Trusted Root Certificate Program.

Features:

  • Verifies publisher’s identity
  • Authenticate the source and integrity of your code.
  • Eliminate “Unidentified Publisher” warnings.
  • Inspire confidence from users by showing them your code is trustworthy.
  • Creates a trusted sales outlet.
  • Maintains content authenticity.
  • Protects software from tampering.
  • Improves software downloads.
  • Creates a trusted distribution outlet.
  • Compatible with all major platforms.

Digital signatures are created using a public-key signature algorithm such as the RSA public-key cipher

Features & Benefits of Code Signing

Customer Confidence

They assure customers that you are trustworthy enough to do business with.

Authenticity

After downloading, end users can be sure that the code they obtained really came from you, helping you preserve your business reputation and intellectual property. Digital ID’s allow customers to identify the author of digitally signed code and contact them should an issue or query arise.

Ease of Use

Code signing certificates are easy to use in conjunction with the vendor software tools that developers use to create products, macros and objects.

Widely Supported

Code Signing Certificates are compatible with all major formats, including Microsoft Authenticode (including kernel-mode signing), Adobe Air, Apple applications and plug-ins, Java, MS Office Macro and VBA, Mozilla object files and Microsoft Silverlight applications. Code Signing certs are trusted by Windows XP and upwards, including Windows 10.

Drillsoft have Code Signing Certificate in all its product.

How to check Digital signatures:

You can view information about a digital signature:

Use Windows Explorer to locate the executable file — “Setup_HDX.exe”, “HydraulX.exe”. Right-click on the file to display the file’s pop-up “context” menu. Then selecting the “Properties” menu item at the bottom of the context menu.

Code Signing Certificate Digitally signed executable files have a “Digital Signatures” tab.

To view the file’s signatures, select that tab:

In the case of Drillsoft a single digital signature — Drillsoft LLC — will appear in the Signature List. To display the details of this signature, either double-click the “Drillsoft LLC” line in the Signature List, or select the line then press the “Details” button:Code Signing Certificate

The top of the Digital Signature Details dialog verifies the condition of the chosen signature on the executable.
If the file has not been tampered with since it was signed, and if the digital signature is valid, this page will confirm those factsCode Signing Certificate

However, if something has altered the file in any fashion, or if the signature is invalid, the Digital Signature Details will show that instead:

Code Signing Certificate

Digital Signatures allow you to quickly determine and confirm the authorship of any digitally signed file, and simultaneously verify that the file has not been altered or tampered with in any way.

Code Signing Certificate

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.