Self Signing MSI Files

[Guest]

I'd like to start signing the MSI files that we package for our internal
organization. These packages do not leave the company. For what it's worth,
we are signing them so that we can use them with the Software Restriction
Group Policy for Windows XP.

Is there any harm in using MAKECERT.EXE to generate a certificate, instead
of purchasing a commercially recognized certification?

Thanks!

 

[Steven L Umbach]

Though I have not tried it myself I don't see any problems offhand as long
as it is used only internally for certificate rules. As always be sure to
test anything before deploying network wide. If you have any Windows servers
on your network it would not be that hard to create your own Certificate
Authority. Microsoft.public.security.crypto would also be a good place to
post your question. --- Steve