InstallShield 2012 Express Edition User Guide - Knowledge Base ...

Signing Tab
Chapter 24: View Reference
Prepare for Release View
The Signing tab is where you specify the digital signature information—including the digital signature
files granted to you by a certification authority—that InstallShield should use to sign your files. It is also
where you specify which files in your installation should be digitally signed at build time.
Table 24-64: Settings on the Signing Tab
Setting Media Type Description
Certificate URL Custom, CD-ROM,
DVD,
SingleImage,
WebDeployment
Digital certificate
file (SPC or PFX)
Private key file
(PVK)
Certificate
Password
Custom, CD-ROM,
DVD,
SingleImage,
WebDeployment
Custom, CD-ROM,
DVD,
SingleImage,
WebDeployment
Custom, CD-ROM,
DVD,
SingleImage,
WebDeployment
Sign Output Files Custom, CD-ROM,
DVD,
SingleImage,
WebDeployment
Sign Files in
Package
Custom, CD-ROM,
DVD,
SingleImage,
WebDeployment
Type a fully qualified URL—for example, http://www.mydomain.com. This
URL is used in your digital certificate to link to a location you would like end
users to visit in order to learn more about your product, organization, or
company.
Specify the location of your digital certificate file (.spc or .pfx) provided by a
certification authority. You can type the path to the file or use the Browse
button to navigate to the file location.
If you specify an .spc file, you must also specify a .pvk file.
If you are using an .spc file, you must also specify the location of your private
key file (.pvk) provided by a certification authority. You can type the path to
the file or use the Browse button to navigate to the file location.
If you would like to pass the password for the .pvk file or the .pfx file to
ISCmdBld.exe to digitally sign your application while building the release
from the command line, type the password in this box. InstallShield encrypts
this password and stores it in your project file (.ise).
If you do not specify a password in this box but you are digitally signing the
release while building it from the command line, you will need to manually
enter the password when you are prompted each time that you build the
release from the command line.
Specify which files you want to be signed. Available options are:
• None—To avoid signing your installation, select this option.
• Setup.exe—To sign your Setup.exe file, select this option.
• Setup.exe and Windows Installer Package—To sign your
Setup.exe file and your Windows Installer package (.msi), select this
option.
• Windows Installer Package—To sign your Windows Installer package
(.msi), select this option.
Specify whether you want to sign any of the files in your release.
If you select Yes, use the Include Patterns and Files setting and the Exclude
Patterns and Files setting to indicate which files should be signed.
Windows Logo Guideline: All executable files (including .exe, .dll, .ocx,
.sys, .cpl, .drv, and .scr files) in an installation must be digitally signed for the
Windows logo program.
InstallShield 2012 Express Edition User Guide ISE-1800-UG01 589