PDA

View Full Version : digital certificate file + private key file



jrahma
08-03-2008, 03:53 PM
I want to know how and where to get:

digital certificate file (*.spc, *.pfx)
private key file (*.pvk)

for my .NET application?

and is it free?

MichaelU
08-04-2008, 09:27 AM
If you wish to sign your build exe and dll files (and your installer) so that users downstream can easily verify you were the one who created them, you will need to purchase a certificate from a trusted authority, such as Verisign, Thawte, Comodo, or others (search for something like "purchase authenticode certificate" for more information). I think this is what you are asking.

If you wish to leverage digital signatures programatically within your application and do not care what the global trust status of them is, you can create your own test certificates for free using tools like makecert.exe. The downside of this approach is nobody else is likely to trust data signed with test certificates, so I doubt this is what you are asking.