VB6 exe and Digital Signing 1

[newora]

Hi There - could somebody please point me in the right direction with regards to obtaining a digital signature for my VB6 program.

I have an old VB6 developed system - one main exe file and about 8 dll files. I have installed this onto Windows Vista but I am getting the user access control message problem.
I know that I can get over this by turning UAC control off but I would prefer not to do this, if I can help it.

Thus could somebody please point me to a reputable supplier / provider of the appropriate digital signature software? Are they expensive to obtain and also will they stil be required to get over the UAC message in Windows 7?

Many thanks for your assistance

Andrew

 

[AndyGroom]

There are some useful links in this thread that I think cover your questions:

http://www.tek-tips.com/viewthread.cfm?qid=1552539

- Andy
___________________________________________________________________
If you think nobody cares you're alive, try missing a couple of mortgage payments

 

[newora]

That's great, thank you for the information.

Andrew

 

[dilettante]

I don't think you're going to bypass the UAC dialog to start an elevated process this way though. With signed, trusted code the UAC prompt dialog just has a different "alert level" color and reports your company name instead of "Unidentified publisher."

If your application is not truly meant to perform administrative actions you need to rewrite it for proper behavior under Limited User scenarios. You might read some of the white papers and such at DevReadiness.org Files.

 

[newora]

Thanks for that dilettante, if I understand correctly then you are saying that I will always get the UAC box up whenever I run my prgram under Vista, wether it is digitally signed or not?
If this is the case now do programs such as Word and PC Anywhere, which are also on the machine, run up ok wihtout the UAC dialog box appearing? I just assumed it was because they were digitally signed using a certificate from Verisign or such like?

Thanks again

Andrew

 

[dilettante]

If your program is written so that it does not perform any function requiring admin rights it should be able to run without requesting elevation.

If you program declares itself "Vista aware" through its manifest (i.e. it has a trustInfo section) it will be terminated if it tries to violate system security. If your program does not declare itself Vista aware, then many things it might try to do will be "vistualized." For example writing to restricted parts of the registry or filesystem.

 

[newora]

Many thanks for the information Dilettante - you certainlky know your stuff.

Andrew

 

[AndyGroom]

...and with 'vistualized' it proves he's also into neologism!

- Andy
___________________________________________________________________
If you think nobody cares you're alive, try missing a couple of mortgage payments

 

[dilettante]

Hey Andy, glad you caught that. What an ugly typo that one is.

Funny as heck in a way, but perhaps misleading and confusing (I'd meant to type virtualized of course).