Home All Groups Group Topic Archive Search About
Author
29 Dec 2008 3:09 PM
solboy
Hi everyone:

My question is the following. I've hundreds of macros signed with a
certificate from my own Microsoft CA. The certificate is just valid till
next January 14th. I would like to renew the certificate so I had not to
sign all macros again. What do I have to do so I can renew the certificate
without having to sign all macros again??

It's very important for me because it's a lot of work signing all macros
again

Thanks in advance

Author
2 Jan 2009 4:57 AM
Joe Kaplan
When using digital signatures, the important thing to do is to use a digital
time stamp as part of the signing to have the signature last longer than the
certificate that signed it.  The digital signatures on your macros may or
may not support that feature, but that is the only supported way to handle
this.  If you did not sign all the objects with a time stamp, you'll have to
resign them all anyway.  Renewing the certificate won't help as the
certificate embedded in the signature is what is used to validate the
signature.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
Show quoteHide quote
"solboy" <crespo_santama***@hotmail.com> wrote in message
news:6B796597-5F93-4175-AE7C-C4919E598D24@microsoft.com...
> Hi everyone:
>
> My question is the following. I've hundreds of macros signed with a
> certificate from my own Microsoft CA. The certificate is just valid till
> next January 14th. I would like to renew the certificate so I had not to
> sign all macros again. What do I have to do so I can renew the certificate
> without having to sign all macros again??
>
> It's very important for me because it's a lot of work signing all macros
> again
>
> Thanks in advance