Certifying windows executables?

[rvk]

DigiCert, Sectigo and GlobalSign all offer that in the range.  Comodo is slightly more expensive.

I have a Sectigo certificate (via Xolphin) and nowadays it's definitely not in that range anymore.

Sectigo Code Signing
Vanaf € 369 Per jaar* (Prijzen excl. BTW)

https://www.sectigo.nl/digitalehandtekeningen/code-signing
https://www.sectigo.com/ssl-certificates-tls/code-signing

And via sslstore still above $200 (only when choosing 3 years otherwise it's well above $300).
https://www.thesslstore.nl/products/code-signing-certificates.aspx

But ok, if your half-hour rate is $119, that might not be too expensive 

(Luckily I'm still on 3 years (with 1 extra year extended).)

[paweld]

And yes... you can purchase one for $129 for one year... but look at the small print:

Pricing Tier:
Tier 1 Monthly - $20/Mo - 20 Signings - 1 Credential
Credentials:
1
Total: $129.00

So it's just for 20 signings.

Please don't bullshit us (or at least provide the relevant details).

@rvk - what you are writing about applies to the cloud signing service - there is no obligation to purchase this, then you need to put the certificate on a hardware usb token/HSM and no signature limit applies. Such a device costs about $300 with them

DigiCert, Sectigo and GlobalSign all offer that in the range.  Comodo is slightly more expensive.

All the certificates you listed cost well over $200 on the publisher's sites (Sectigo ~$340, DigiCert ~$580, GlobalSign ~430).
I recommend checking before you write.

[Thaddy]

The answer was from Microsoft, which is the licenser, not the licensee and as per today. (and the root certicate holder)
It may be the case you have to ask for "best price".

I am sure I am right.

You do not know my phone book nor my email history.
You do not even know who I am.

[paweld]

The answer was from Microsoft, which is the licenser, not the licensee and as per today. (and the root certicate holder)
It may be the case you have to ask for "best price".

I am sure I am right.

You do not know my phone book nor my email history.
You do not even know who I am.

I, and I think most users, are interested in the actual price of the certificate - not the imaginary price I might get if I were you.
You don't provide any sources to back up your words, so few will take them seriously.

[rvk]

I, and I think most users, are interested in the actual price of the certificate - not the imaginary price I might get if I were you.
You don't provide any sources to back up your words, so few will take them seriously.

Yes, and the mentioned $19 for the Microsoft Store (where Microsoft signs it for you before putting it in the store) is only for MSIX/AppX packages. Not for EXE/MSI executables. For that Microsoft still requires you to sign with a trusted CA before submitting it to the Store.

[Thaddy]

You can have msi signed.
And, when you have an msdn subscription it is free.

Google first, complain later..... Or use Bing for that matter....
Then the blind may see after all.

ssl.com is $129 that is not far of $119 I mentioned.

[rvk]

You can have msi signed.

Do you have a source of this statement?
In the past it wasn't possible. Requirements:

4. Digital signature/code signing using a certificate from a trusted Certified Authority which is part of the Microsoft Trusted Root Program. Unlike the MSIX applications, which are signed automatically after successful validation by Microsoft, MSI and EXE applications must be digitally signed.

https://www.advancedinstaller.com/publish-msi-exe-app-microsoft-store.html
Article is from February 14th, 2024.
I would love to know if this changed.

Google first, complain later..... Or use Bing for that matter....
Then the blind may see after all.

ssl.com is $129 that is not far of $119 I mentioned.

Thaddy, please provide quotes and links before using those emojis.

[Thaddy]

Lazy bastard,
https://www.sslshopper.com/cheap-code-signing-certificates.html
 

That is gross.
Profesionals stil working should simply know how to get the best price.
 

Don't let me write that I have as much confidence in you, as you have in the wrong database engine choice you made.
(because that would be an insult)

[rvk]

Lazy bastard,
https://www.sslshopper.com/cheap-code-signing-certificates.html
 

That is gross.
Profesionals stil working should simply know how to get the best price.
 

I was talking about the MSI/EXE for Microsoft store.
Show the source that Microsoft signs MSI.

And $119 is not $129 so you are not correct either.
Yes, it might be close but as said before, you need to invest more than €300 for the hardware.

And stop using those emojis and swearwords.

[Thaddy]

No. It is colorful.

The source is not difficult for normal people: m.i.c.r.o.s.o.f.t...c.o.m.
Did you know they even have a chatbot for support?
Plain stupids.

[Thaddy]

https://www.ssl.com/certificates/code-signing/

[rvk]

https://www.ssl.com/certificates/code-signing/

And add $279 for the key itself.

But still haven't given the Microsoft quote.
I have quoted a source which says it's not for EXE and MSI.

Thaddy, our resident forum troll   

[ASBzone]

https://www.ssl.com/certificates/code-signing/

No doubt you've noticed that this is for a code signing cert that can only be used through their cloud portal on a subscription basis, so those are only the initial costs.


And to sign MSI files, you need a 3rd party CA certificate.  There's no free or low-cost option from Microsoft for this.