What is the recommended procedure to use EV code signing

oleg-shilo / wixsharp

Framework for building a complete MSI or WiX source code by using script files written with C# syntax.

MIT License

1.11k stars 176 forks source link

What is the recommended procedure to use EV code signing #814

Closed johannesvp closed 4 years ago

johannesvp commented 4 years ago

Our current MSI works fine, but Windows SmartScreen complains. We are planning to buy an EV code signing certificate to solve this.

I know there is a DigitalSignature built in WixSharp, but I do not know how to use this for an EV certificate. The EV certificate uses an USB key and will need a password.

Can you advise me in the recommended procedure to use EV code signing for our MSI?

oleg-shilo commented 4 years ago

Cannot really contribute to this one but I have set the issue to "help wanted" so hopefully other users notice and respond to your question.

greha commented 4 years ago

Hi, this is something we have looked into the past and ultimately decided against it. What we came up with was: Have the full dev workflow fully automated with a normal cert. Add a special release flow, where just the msi step is "manual" on a specific machine where the usb key is installed and have someone create it manually , and afterwards trigger the next step in the release pipeline which then picks up the msi and proceeds with stuff.

oleg-shilo commented 4 years ago

Closing s there is no activity in this discussion.