PDA

View Full Version : REcommandation for COMODO renew



NewsArchive
01-18-2012, 01:38 AM
Hi all!

Is it still Windows XP/IE8, or have COMODO found a way to WIN7, other
browse programs (Firefox?)

Has to renew my COMODO, and fears it.

I have been on Janes Page, and downloaded the setup pages.

Any problems with a WMWARE virtual pc?

Best regards

Edvard Korsbæk

NewsArchive
01-18-2012, 01:39 AM
Hi Edvard,

> Is it still Windows XP/IE8, or have COMODO found a way to WIN7, other
> browse programs (Firefox?)
>
> Has to renew my COMODO, and fears it.
>
> I have been on Janes Page, and downloaded the setup pages.
>
> Any problems with a WMWARE virtual pc?

If you do not use XP/IE8 then you can't request a pair of .spc/.pvk files.
The certificate will be "installed" directly into your IE certificate store
if you use Vista+. But you can then "export" it to a .pfx.

A VMWare XP machine is no problem as long as you have the "Nonpersistent"
hard-disk option DISABLED!

Firefox is not recommended because you are on your own in this case. Should
work, but I would not do it.

BTW, this "problem" has nothing to do with Comodo at all. Microsoft simply
does not support the technology on UAC-aware systems to handle .spc/.pvk.

http://www.lindersoft.com/forums/showthread.php?t=8279
http://www.lindersoft.com/CodeSign.pdf
http://www.lindersoft.com/forums/showthread.php?t=9498

Good luck! :-)

Friedrich

NewsArchive
01-18-2012, 01:40 AM
Bonjour Fredrich (bonne année a toi mon ami)

I may be wrong in my souvenirs but last time I renewed (last year) I
think remembering I simply did it from my windows 2008 SRV 64 bit OS in
IE and with UAC turned OFF (if this matters) and all was fine for me
and I received my files easily and saved them "manualy".

Just on the "XP" side as an info for others.
(but as I must be the only clarion dev using a server OS as host <g>)

--
JP
__________________________________________________ _____

For those who do not understand ... : "Qui bene amat bene castigat."
__________________________________________________ _____

DMC - Data Management Center : a tool to let you Migrate Import Export
Transfer your Data
www.dmc-fr.com

NewsArchive
01-18-2012, 01:41 AM
Hi JP,

> Bonjour Fredrich (bonne année a toi mon ami)
>
> I may be wrong in my souvenirs but last time I renewed (last year) I think
> remembering I simply did it from my windows 2008 SRV 64 bit OS in IE and
> with UAC turned OFF (if this matters) and all was fine for me and I
> received my files easily and saved them "manualy".
>
> Just on the "XP" side as an info for others.
> (but as I must be the only clarion dev using a server OS as host <g>)

Perhaps you have used the capicom.dll "hack". By default, UAC-aware systems
do not support it because the required components are not available nor
officially supported. As a result, the "In the file" key storage option is
(by default) not available and you can only install the certificate into the
IE store and then export it.

Friedrich

NewsArchive
01-18-2012, 01:42 AM
Just checked this here: clean Windows 7 Ultimate 64-bit Edition, UAC turned
off.

The the "In the file" key storage option was not available.

Friedrich

NewsArchive
01-18-2012, 01:43 AM
On XP, it looks like this (see attached screenshot).

But it's absolutely no problem. IE9 lets you export the .pfx from the
certificate store and then use the .pfx directly in SetupBuilder.

Friedrich

NewsArchive
01-18-2012, 01:44 AM
No hack here

maybe it is a "feature" reserved for srv OS ?

--
JP
__________________________________________________ _____

For those who do not understand ... : "Qui bene amat bene castigat."
__________________________________________________ _____

DMC - Data Management Center : a tool to let you Migrate Import Export
Transfer your Data
www.dmc-fr.com

NewsArchive
01-18-2012, 01:44 AM
Hi Friedrich

Speaking of Code Signing

How do you actually backup your code signing certificate? Where is it?

If I lose a hard disk, is it Bye Bye's?

--
Dan Scott
C55 - C6.3 Legacy
Garage Partner Pro / Invoice Partner
www.garagepartner.com
Plan A is always more effective when the device you are working on
understands that Plan B involves a larger hammer

NewsArchive
01-18-2012, 01:44 AM
Hi Dan,

> Speaking of Code Signing
>
> How do you actually backup your code signing certificate? Where is it?
>
> If I lose a hard disk, is it Bye Bye's?

Just backup your .PFX or .SPC/.PVK files and you are done. The files are
"portable".

Friedrich

NewsArchive
01-18-2012, 01:45 AM
> Hi Dan,
>
>> Speaking of Code Signing
>>
>> How do you actually backup your code signing certificate? Where is it?
>>
>> If I lose a hard disk, is it Bye Bye's?
>
> Just backup your .PFX or .SPC/.PVK files and you are done. The files are
> "portable".

Dan,

AND, be sure to keep track (SAVED) any associated passwords! :-D

David

--
From David Troxell - Product Scope 7.9 - Encourager Software
Product Description - App Data UAC Safe, MFG - Encourager Software
Internet Link - http://www.encouragersoftware.com/software-developers.html

NewsArchive
01-18-2012, 01:46 AM
Glad you said something.. I hadn't backed them up. Last year I had to do the
whole Comodo thing again... no big deal really... just a PITA. Of course I'm
still running on an XP machine and I knew to run IE. It was really pretty
easy.. just follow the instructions. I had to resend some paperwork, but
that wasn't a real problem.. and I they did help via Email.

Ray
VMT

NewsArchive
01-18-2012, 01:46 AM
> Hi all!
>
> Is it still Windows XP/IE8, or have COMODO found a way to WIN7, other
> browse programs (Firefox?)
>
> Has to renew my COMODO, and fears it.
>
> I have been on Janes Page, and downloaded the setup pages.
>
> Any problems with a WMWARE virtual pc?

Edvard,

I would trust Friedrich's advice - use Windows 7 - IE to order and export
it - "The certificate will be "installed" directly into your IE certificate
store if you use Vista+. But you can then "export" it to a .pfx."

Most ONLY neeed the more modern UPDATED code signing tool -

signtool.exe

and will use it in Windows 7 to codesign - remember the rule is:

Signtool.exe - Use a certificate in a PFX format (also P12)

Signcode.exe - Use a certificate in spc and pvk file format.

IF you still need the spc and pvk file format - be sure and follow Jane's
advice (also included in App Data UAC Safe CHM)

AND order it XP and IE combination

(yes a XP VM will work - order from SAME XP VM and pick it up in same XP
VM) - AND then you can convert spc and pvk to PFX format as well for
signtool.exe use.

Here are some additional tips (download location for Windows 7 signtool.exe
and Jane's advice)

Product Description - App Data UAC Safe, MFG - Encourager Software
Internet Link - http://www.encouragersoftware.com/software-developers.html

Windows 7 signtool.exe help topic

CAPICOM.DLL is no longer needed in order to use signtool.exe for code
signing. CAPICOM has been deprecated by Microsoft for Windows 7.

Download instructions for latest signtool.exe for Windows 7 included in
help topic.

Product Description - Learning SetupBuilder Part I, MFG - Lindersoft
Internet Link - http://www.lindersoft.com/downloads_evaluation.htm

Lindersoft Free Evaluations Download Center

An excellent resource is located at the Lindersoft evaluations download
center - Download and install evaluation editions of SetupBuilder Setup
Tools. Lindersoft also provides at this location -

Learning SetupBuilder Part I - written by Jane Fleming - it not only
provides very detailed and technical information for learning SetupBuilder
tools, but excellent tutorials on a variety of important Windows topics
such as:

Windows SIDs and Tokens, CSIDL, Virtualization, Manifests, Code-Signing,
"Over the Shoulder" Installations

David

--
From David Troxell - Product Scope 7.9 - Encourager Software
Product Description - App Data UAC Safe, MFG - Encourager Software
Internet Link - http://www.encouragersoftware.com/software-developers.html