Code signing of software for Microsoft smartphone in practice, part 2 of 2
Get insight into code signing process.
By now the file has been code signed locally as you can observe in the first part of this article here. Now it is a time for final singing - the code signing on the server side. For this purpose we will upload file to the server where it will be signed.
At first you must go to the proper address at GeoTrust web site. But instead of asking you for password, it asks you frist to select a certificate:
... after selecting of the certificate (remember: you must previusly have USB token connected to your PC, or you will not be able even to enter the GeoTrust web site for code signing)! But if your USB token and password are right then you should be able to log in and see this screen:
Now click on "Upload Code" link, to observe a web form for file uploads:
Be sure that you enter here everything properly because after this step the proper final signing will take place. If you for example will try to upload for signing an application that is was not previously signed locally, you will get this error message:
... but you entered all data properly you will something like this:
... where "Signing Set ID" is a special number used to cover for example 1 exe file and 1 DLL file in one CAB file - then all 3 files have to have the same signing ID. Now you can click on the "Download Code" link and observe the list of already code signed files:
... where among them is also the file that you have just signed.
Remember that you must sign EXE and DLL files for smartphone and CAB files for smartphone that usually include the EXE, DLL and some other files (you donīt have to sign images for example), but you donīt have to sign the EXE file for PC (installer) that contains the CAB file - fortunately the PC does not require signing (yet, but in next version of Windows like Longhorn - nobody knows), but only these files that are going to smartphone need signing: EXE, DLL and CAB.
Conclusions
Although the signing process sounds complicated, it is quite easy as you could see above. And since many Microsoft smartphones (probably more than 90% on the market) still is software locked and does not allow for execution of non-signed software, the code signing is a necessity for companies developing software or this platform.
Mobile Windows News | 
Podcasts | 
Videos | 
Store | Search | Forums | Site News
