Support for Digital Signature in Standard Signing

InstallAnywhere 2024 R1

In InstallAnywhere 2024 R1, when you are configuring digital signature information in standard signing approach, use the Certificate Selection dialog box to specify which certificate you want to use to sign your files. InstallAnywhere lets you choose between the following options:

You can specify the .pfx certificate file on your machine that you want to use for signing.
You can reference a certificate store that contains the certificate that you want to use for signing.

Accessing the Certificate Selection Dialog Box

Instructions on how to access the Certificate Selection dialog box depend on whether you are specifying certificate information for a release, a patch, or a QuickPatch package.

To access the Certificate Selection dialog box for a release:

1. In the Advanced Designer, on the Project page, click on the Platforms. The Platforms view opens.
2. In the Windows area, under the Digital Signing setting, select the standard option in the Signing Method setting field.
3. Then in the Certificate Information setting field, click the ellipsis button (...).

Certificate Selection Dialog Box Settings

Certificate Selection Dialog Box Settings (Sheet of )

Setting

Description

Use a file (.pfx)

To use a .pfx file to digitally sign your release at build time, select this option. Then specify the location of your .pfx. You can type the path to the file or use the ellipsis button (...) to browse to the file location.

Use a certificate store

To reference a certificate store that contains the certificate that you want to use to digitally sign your release at build time, select this option and then enter values in the subsettings under this option.

Certificate Store Name

Select the name of the certificate store that contains the certificate that you want to use. Available options are:

Personal
Trusted Root Certification Authorities
Enterprise Trust
Intermediate Certification Authorities

This setting is available if you select the Use a certificate store option.

Certificate Store Location

Select the location of the certificate store that contains the certificate that you want to use. Available options are:

User
Machine

This setting is available if you select the Use a certificate store option.

Certificate Subject

Enter the subject of the certificate that you want to use, or select from the list of certificates that are available on your machine.

This setting is available if you select the Use a certificate store option.

Signature Digest

Choose the signature digest hashing algorithm (or choose to let InstallShield specify it automatically based on the certificate hash). Available options are:

Based on certificate hash
SHA-1
SHA-256
Dual (SHA-1 & SHA-256)

Important:Only when choosing Dual (SHA-1 & SHA-256), the Timestamp Server is Mandatory.

To specify digital signature information in standard signing approach:

1. In the Advanced Designer, on the Project page, click on the Platforms. The Platforms view opens.
2. In the Windows area, under the Digital Signing setting, select the standard option in the Signing Method setting field.
3. Configure each of the enabled settings as required in the standard signing approach.

As an alternative, to specify the actual certificate file, password, and timestamp server in the required subsettings of the Digital Signing setting on the Platforms view, you can use build-time variables in these subsettings (that is, enclose the name of each variable within at symbols: @VariableName@). You can set build-time variables in the Variables view on the Project page, through a .properties file, or through environment variables. For more information, see Resolving Variables at Build Time.

See Also