Do we need to deploy a code signing certificate?

Add-in Express™ Support Service
That's what is more important than anything else

Do we need to deploy a code signing certificate?
 
Nicholas Hebb


Guest


I haven't developed an add-in from scratch in 3-4 years, so I'm a little rusty on things. If the add-in is deployed to the user's AppData folder, I seem to recall that some organizations had tighter security restrictions and digitally signed add-ins wouldn't load unless the certificate was installed locally (e.g., to the TrustedPublisher store).

Is certificate deployment a standard practice?
Posted 23 Aug, 2016 22:45:28 Top
Andrei Smolin


Add-in Express team


Posts: 18829
 Joined: 2006-05-11
Hello Nicholas,

No. You need to sign your add-in with a certificate. The customer may or may not add the publisher of the add-in to the list of trusted publishers.


Andrei Smolin
Add-in Express Team Leader
Posted 24 Aug, 2016 01:48:03 Top
Nicholas Hebb


Guest


OK, now I remember. My add-ins are signed with a certificate. By installing the certificate to the user's local store during setup, the user is no longer prompted to add the publisher to the list of trusted publishers. I just forgot why my old add-ins were deploying it. :-)
Posted 24 Aug, 2016 02:50:51 Top
Andrei Smolin


Add-in Express team


Posts: 18829
 Joined: 2006-05-11
No problem ))


Andrei Smolin
Add-in Express Team Leader
Posted 24 Aug, 2016 02:53:05 Top