|
| Which type of certificate should I request? |
|
The certificate type you choose is up to you. It is very much dependant on the end user
software which will be using your signed code. Have a look at the different scenarios below, and choose the one that best fits your case. What would you like to sign?
|
|
|
|
| I want to sign Java applets for the Java 2 plugin, what do I use? |
|
| certificate type |
code signing tool |
end user software |
| Netscape Object Signing Certificate (Multi-purpose certificate) |
Netscape signtool 1.1 - 1.2 |
Java 2 Plugin (version 1.2.2) Java 2 Plugin |
| Javasoft Certifcate |
JDK 1.3, 1.4, 1.5 |
Java 2 plugin (version 1.3 and above) |
| Microsoft Authenticode Certificate (Multi-purpose certificate) |
JDK 1.3, 1.4, 1.5 |
Java 2 plugin (version 1.3 and above) |
| VBA Developer Certificate (Multi-purpose certificate) |
JDK 1.3, 1.4, 1.5 |
Java 2 plugin (version 1.3 and above) |
| Apple Code Signing Certificate (Multi-purpose certificate) |
JDK 1.3, 1.4, 1.5 |
Java 2 plugin (version 1.3 and above) |
|
You can use Sun Java JDK 1.2.x just as long as you use the copy of keytool that ships with Sun Java JDK 1.3
|
| Plugin 1.2.2 : You have to use version 1.0, version 1.1, or version 1.2 of signtool if you want to sign Java applets for any version of the Java 2 Plugin prior to version 1.3.
Also note that only version 1.2.2 and above of the plugin supports Netscape Object Signing (signtool). Please note that Netscape does _not_ support Signtool 1.0, 1.1, 1.2 and 1.3
|
Plugin 1.3 : You can use any version of signtool if you are aiming your code at version 1.3 and above of the Java 2 plugin.
|
|
|
|
| I want to sign Java applets for Navigator/JVM 1.1.x, what do I use? |
|
| certificate type |
code signing tool |
end user software |
| Netscape Object Signing Certificate (Multi-purpose certificate) |
Netscape Signtool 1.1 - 1.3 |
Netscape Navigator / JVM 1.1.x |
| Microsoft Authenticode Certificate (Multi-purpose certificate) |
|
|
| VBA Developer Certificate (Multi-purpose certificate) |
|
|
| Apple Code Signing Certificate (Multi-purpose certificate) |
|
|
|
| Multi-Purpose Certificates: When we use the term "Multi-purpose certificate" we refer to any of the following certificates: Netscape Object Signing, Microsoft Authenticode,
Apple Code Signing, VBA Developer. These certificates can each be converted from one type to the other. For example, if you have an Authenticode Certificate, you can convertit to a
Netscape Object Signing Certificate, and vice versa.
|
|
|
|
| I want to sign Java applets for MS, what do I use? |
|
| certificate type |
code signing tool |
end user software |
| Microsoft Authenticode Certificate (Multi-purpose certificate) |
MS Inet SDK, MS Platform SDK |
MS Internet Explorer 4.0 + / MS JVM |
| Netscape Object Signing Certificate (Multi-purpose certificate) |
|
|
| VBA Developer Certificate (Multi-purpose certificate) |
|
|
| Apple Code Signing Certificate (Multi-purpose certificate) |
|
|
|
|
|
|
I want to sign a ".cab", ".exe", ".ocx" or ".dll", file what do I use?
|
|
| certificate type |
code signing tool |
end user software |
| Microsoft Authenticode Certificate (Multi-purpose certificate) |
MS Inet SDK, MS Platform SDK |
MS Internet Explorer 4.0 + |
| Netscape Object Signing Certificate (Multi-purpose
certificate) |
|
|
| VBA Developer Certificate (Multi-purpose certificate) |
|
|
| Apple Code Signing Certificate (Multi-purpose certificate) |
|
|
|
|
|
|
| I want to sign an Office 2000/XP/2003 Macro, what do I use? |
|
| certificate type |
code signing tool |
end user software |
| Microsoft Authenticode Certificate (Multi-purpose certificate) |
Office Visual Basic editor. |
MS Internet Explorer 4.0 + |
| Netscape Object Signing Certificate (Multi-purpose
certificate) |
|
|
| VBA Developer Certificate (Multi-purpose certificate) |
|
|
| Apple Code Signing Certificate (Multi-purpose certificate) |
|
|
|
| Office 2000/XP/2003 requires that the certificate and private key be installed in the Windows registry. When you request your certificate the system will allow you
to specify the location where you'd like to store the private key(.pvk) on your hard drive.
The default being "C:\mykey.pvk". Microsoft provides a tool that will import the certificate (.spc) and private key (.pvk) into the registry therefore the key format is not a problem.
|
|
|
|
| I want to sign Navigator/JVM 1.1.x and Internet Explorer objects, what do I use? |
|
| certificate type |
code signing tool |
end user software |
| Microsoft Authenticode Certificate (Multi-purpose certificate) |
MS Inet SDK, MS Platform SDK Netscape signtool 1.3 |
MS Internet Explorer
Netscape Navigator
|
| Netscape Object Signing Certificate (Multi-purpose
certificate) |
|
|
| VBA Developer Certificate (Multi-purpose certificate) |
|
|
| Apple Code Signing Certificate (Multi-purpose certificate) |
|
|
|
|
|
|
| I want to sign everything, what do I use? |
|
| certificate type |
code signing tool |
end user software |
| Microsoft Authenticode Certificate (Multi-purpose certificate) |
MS Inet SDK, MS Platform SDK
Netscape Signtool 1.1 - 1.3
|
MS Internet Explorer / JVM
Netscape Navigator / JVM
|
| Netscape Object Signing Certificate (Multi-purpose
certificate) |
JDK 1.3, 1.4, 1.5 |
Java 2 plugin |
| VBA Developer Certificate (Multi-purpose certificate) |
|
|
| Apple Code Signing Certificate (Multi-purpose certificate) |
|
|
|
|
|
|
| I want to sign Apple content, what do I use? |
|
| certificate type |
code signing tool |
end user software |
| Microsoft Authenticode Certificate (Multi-purpose certificate) |
Apple Data Security Services SDK |
Apple Mac OS X |
| Netscape Object Signing Certificate (Multi-purpose certificate) |
|
|
| VBA Developer Certificate (Multi-purpose certificate) |
|
|
| Apple Code Signing Certificate (Multi-purpose certificate) |
|
|
|
|