Code Signing
Distributing trustworthy software over
the Internet
GlobalSign. A GMO Internet Inc group company.
Contents
As operating system and browser vendors move towards higher
security models and lock down capabilities on unknown code, it is
increasingly important for developers and end users to identify
legitimate applications from the masses of badware.
What is Code Signing?
The Benefits of Code Signing
Supported Platforms
Buyer Considerations
Why choose GlobalSign?
Adding Code Signing to your Portfolio
www.globalsign.com
www.globalsign.com
Users abandoning the installation of an application that is not easily identified as genuine.
Malicious alteration of legitimate code.
Identity theft or damage to reputation of vendor or code author.
The end user knows the digitally signed software being executed is legitimate, comes
from a known software vendor and has not been tampered with since being
published.
Unsigned code
The end user is presented with a
warning message that may cause
them to abandon the install.
Signed code
The code has been digitally signed
by a certificate from a trusted
Certification Authority. The end
user is presented with the
publishers identity.
www.globalsign.com
Supported Platforms
Different platforms have different requirements and options
available for digitally signing code. GlobalSigns Code Signing
Certificates support:
Microsoft Authenticode
Windows ActiveX controls can be
signed via Authenticode (32 bit and
64 bit .exe, .ocx, .dll or other) and
Kernel software for Windows.
Windows 7 compatible.
www.globalsign.com
Buyer Considerations
There are several elements to consider when choosing the right
Code Signing Certificate to sign your application.
Ubiquity
Public rooted Code Signing Certificates, as opposed to self-signed certificates, will
allow users to verify the authenticity of the publisher and origin of the software, as
well as ensuring that the code has not been tampered with.
Timestamping services
Timestamping ensures that the signature on your application remains valid after the
certificate has expired.
Trust
A good reputation and credibility of the Authority can inspire additional downloads of
your application.
www.globalsign.com
Code Signing is the ideal value-add product for VARs looking to complement
core services and existing portfolios, opening up a new revenue stream and ensuring
customer satisfaction.
Security
Partner Program
GlobalSign has developed specialist partner programs to allow you to resell Digital Certificates cost-effectively and hassle-free.
Partners receive instant discounts and the GlobalSign SaaS web portal makes the application of certificates quick and easy. A flexible XML API
can also allow the process to be fully automated and integrated into your own workflows.
The whole range of GlobalSign Digital Certificate Solutions can be resold using the GlobalSign Partner account, including:
www.globalsign.com