My experience with Comodo code signing certificates
Saturday, March 15th, 2008Hello,
we plan to release a new product soon and I thought it would be a good idea to finally sign our installers so that our users perception of EmPowerTecs credibility improves even more
So I looked into the various alternatives and found a posting on Joel Spolskys Business of Software forum which stated that a Comodo code signing certificate for one year can be bought for just 85 USD. At this price (and with the current USD/EUR exchange rate!) that’s a no brainer for me.
The ordering on the K Software website was smooth and Comodo processed the order fine. But the certificate did not work! I approached the Comodo support which answered extremly friendly and timely but a bit shallow. I had to restate my arguments several times until I got an answer that looked as if someone had actually read my mails. But nothing helped and finally the Comodo support said that I have to ask the reseller K Software for further support. Now, Mitchell Vincent of K Software was totally helpful and offered my a refund and a reissue (basically a complete new purchase). He also made upfront clear that Comodo is quite slow in processing the refunds but he took the responsibility to forward my new order only after Comodo has eventually made the refund. Finally, a couple of days later I had the code signing certificate correctly installed:
To save you the same hassles, here is what I have learned during the process. I think both K Software and Comodo should make these points totally clear during the order process.
- Use the same machine for ordering and for installing (”collecting”, as Comodo calls it) the certificate. I use different virtual machines for development and for email and I ordered on the development VM and tried to install the certificate on the “office” VM. However, I was not aware that the innocent link in the email actually performs the installation.
- Order and install the certificate as administrator. I usually work as restricted user.
- Use Internet Explorer. I use Firefox normally. Although Comodo says that Firefox should work they recommend to use Internet Explorer.
- Add https://secure.comodo.net to your trusted sites. I have scripting switched off for non trusted sites.
These points are probably totally obvious to Vincent Mitchell and the staff at Comodo but for me they where not. In particular I was not aware that the certificate is actually installed by a script in the browser.
If you don’t make the mistakes I have made its a pretty smooth process for a great price.
Finally, here is a link that helps you to integrate the code signing in your build.
Best regards,
Andreas
Technorati Tags: Code signing, Comodo, K Software

