Code-signing certs: June 1 deadline reminder

[NewsArchive]

It's Coming!!!

Sectigo is offering a "bargain" (not nearly as good as SetupBuilder's)
to help the transition to hardware key storage.

Even if your certificate still has some time left on it, it's worth
considering renewing it (with SetupBuilder prices) prior to the
hardware requirement that begins on June 1.

As if code-signing certs weren't already enough of a
pain-in-the-asterisk

The
"bargain"](https://sectigo.com/ssl-certificates...gning-campaign
)

From Sectigo's website:
>What is Changing?
>
> As of June 1, 2023, all Code Signing Certificates must comply with the new CA/B Forum regulations to ensure that the subscriber’s private key is generated, stored, and used in a suitable FIPS-compliant hardware.
>
> We recognize this requires customers to commit to a heavy lift. Between now and April 24, 2023, you can purchase Sectigo OV Code Signing certificates and lock-in the use of software-based Code Signing certificates for the next three years and will not be required to switch to a hardware-based token during that time. At the end of your 3-year certificate, Sectigo will ship a free FIPS-compliant token with an extra 12 months of OV Code Signing Certificate validity to you.

[NewsArchive]

On 29 Mar 2023 18:26:04 -0400, Kelvin Chua wrote:

Hi, Kelvin,

I renewed mine in January. It was a REAL PAIN this time.

I was going to write up the experience; but because everything will
change in a couple of months decided it wasn't worth the effort.

I did, however, explain here what I needed to do:
https://clarionhub.com/t/codesigning...5802/16?u=jane

You should put in a ticket and push them. Things will not happen
automatically.

jf


>I placed my order with Comodo on Friday ,10 March ,2023-05:46:53 PM
>under discount offerred by SetupBuilder.
>
>Until today, I have not receive my certificates.
>
>Thanks.
>
>Kelvin Chua
>SINGAPORE
>

[NewsArchive]

Hi Jane,

I submitted 3 tickets so far, no one responded at all.

I will try to purchase other certificates next time, it is really hell
to me; they simply don't bother at all.

Thanks.

Kelvin Chua
SINGAPORE

[NewsArchive]

Kelvin,

Did you try telephoning them? I phoned them multiple times. Don't
try on weekends because you'll probably get somebody who can't do
anything.

I think this is the number I used:
International: +1 (914) SECTIGO (732-8446) and then press the option
for "order validation".

jf

[NewsArchive]

Hi Jane,

Will try calling them tonight.

Thanks.

Kelvin Chua
SINGAPORE

[NewsArchive]

Did you get your certificate, Kelvin?

Jane Fleming

[NewsArchive]

Hi Jane,

On 3/29/2023 15:52 PM, Jane Fleming wrote:
> Sectigo is offering a "bargain" (not nearly as good as SetupBuilder's)
> to help the transition to hardware key storage.

Is that the $498 with up to 29% off with multi-year? And $40 for
"standard shipping"? So what does it take to start a code signing
certificate business? Most lucrative "business" on the planet these days!

Best regards,

--
Arnor Baldvinsson
Icetips Alta LLC

[NewsArchive]

And... no one answer emails...no cost!

Kelvin Chua

[NewsArchive]

So you bought the 4 year certificate at $798, is that correct?

And thanks for the info.

Ray Rippey
VMT Software

On 3/29/2023 1:52 PM, Jane Fleming wrote:
> FIPS-compliant hardware.

[NewsArchive]

NO!!
I bought the $200 three-year SetupBuilder certificate in January (no
hardware token).

Just reminding people that the no-hardware option will shortly
disappear :-(

jf