Support for Digital Signature using Windows Store

InstallAnywhere 2021

In InstallAnywhere 2021. when you are configuring digital signature information, use the Certificate Selection dialog box to specify which certificate you want to use to sign your files. InstallAnywhere lets you choose between the following options:

You can specify the .pfx certificate file on your machine that you want to use for signing.
You can reference a certificate store that contains the certificate that you want to use for signing.

Accessing the Certificate Selection Dialog Box

Instructions on how to access the Certificate Selection dialog box depend on whether you are specifying certificate information for a release, a patch, or a QuickPatch package.

To access the Certificate Selection dialog box for a release:

1. In the Advanced Designer, on the Project page, click Platforms. The Platforms view opens.
2. In the Window area, in the Digital Signing setting, in the Certificate Information field, click the ellipsis button (...).

Certificate Selection Dialog Box Settings

Certificate Selection Dialog Box Settings

Setting

Description

Use a file (.pfx)

To use a .pfx file to digitally sign your release at build time, select this option. Then specify the location of your .pfx. You can type the path to the file or use the ellipsis button (...) to browse to the file location.

Use a certificate store

To reference a certificate store that contains the certificate that you want to use to digitally sign your release at build time, select this option and then enter values in the subsettings under this option.

Certificate Store Name

Select the name of the certificate store that contains the certificate that you want to use. Available options are:

Personal
Trusted Root Certification Authorities
Enterprise Trust
Intermediate Certification Authorities

This setting is available if you select the Use a certificate store option.

Certificate Store Location

Select the location of the certificate store that contains the certificate that you want to use. Available options are:

User
Machine

This setting is available if you select the Use a certificate store option.

Certificate Subject

Enter the subject of the certificate that you want to use, or select from the list of certificates that are available on your machine.

This setting is available if you select the Use a certificate store option.

Signature Digest

Choose the signature digest hashing algorithm (or choose to let InstallShield specify it automatically based on the certificate hash). Available options are:

Based on certificate hash
SHA-1
SHA-256
Dual (SHA-1 & SHA-256)

Important:Only when choosing Dual (SHA-1 & SHA-256), the Timestamp Server is Mandatory.

To specify digital signature information for your Windows-based installers:

1. In the Advanced Designer, on the Project page, click Platforms. The Platforms view opens.
2. In the Windows area, configure each of the Digital Signing settings as needed.

As an alternative to specifying the actual certificate file, password, and timestamp server in the Platforms Settings view, you can use build-time variables in these settings (that is, enclose the name of each variable within at symbols: @VariableName@). You can set build-time variables in the Variables view on the Project page, through a .properties file, or through environment variables. To learn more, see Resolving Variables at Build Time.

See Also