Digi-Code™ Software & Macro Signing

Digi-Code™ Support

This is the main Digi-Code™ Support page and provides all the main support pages you require to configure, own, deploy, manage and maintain your Digi-Code™ Certificates.

You can browse this Support Directory or you can view the Digi-Code™ KnowledgeBase [1] that contains specific Questions & Answers [Q&A] (this is free today but will be a 'Subscription Only' service soon).

Alternatively, you may wish to search all of the Digi-ID™ pages using the search facility below.

Search all Digi-Code™ pages

You can return 'Up' to the main Support section of the entire site or continue browsing by using the links below. And remember, to get the most extensive help file access and or to contribute, Login [2] or Register [3]

Convert .pfx (p12) certificate to a .pvk + .spc

Steps required to convert .pfx (p12) to .pvk + .spc

Follow all of these steps carefully to convert your .PFX (p12) certificate to a .pvk + .spc combination on Windows®

Microsoft® Wizard

Use the Microsoft® export wizard with the following options:

Note: If you are running Windows® you may download OpenSSL here [4]. Otherwise, you can find compiled binaries directly from the OpenSSL [4] website or consult your Operating System's package management feature.

Extracting the private key

The PFX password will be asked.

Using the Microsoft® Authenticode® Certificate

In order to use the Microsoft® Authenticode® Certificate to sign VBA projects you will need to import the .pvk and .spc file into your registry using a tool called pvkimprt and then export the keys as a .pfx file which you can import into your browser, this will then allow you to add the signature to the VBA Macros using the Visual Basic editor.

To download pvkimprt.exe directly from Microsoft®, see the following url: http://www.microsoft.com/downloads/details.aspx?FamilyID=f9992c94-b129-4... [6] or download it from here [7].

The pvkimprt.exe is a self extracting file, with the same name as the tool you will use to import the files. Make sure you install the file before running the pvkimprt command.

Importing the files

To import the files using pvkimprt.exe, you must reference the full path for your .spc and .pvk files.

You will then be prompted for the Private Key password you specified when you generated the Private Key file.

Once the keys have been imported into the registry you will need to export the private key and certificate attached together as a .pfx file using the pvkimprt tool.
To export the keys as a .pfx file using pvkimprt.exe: c:\pvkimprt -pfx cert.spc key.pvk
It will bring up the export wizard, in the first window tick 'Yes' to export the private key, in the second window untick the option 'Enable strong protection..' and tick the option 'Include all certificates in the certification path if possible', then click next, in the third window specify a private key password (do not forget it), in the forth window click 'browse' and save the file to your desktop, click next and finish
Once done, go to your IE properties, click on Tools > internet options > content > certificate > remove, and remove the certificate from the Personal Certificate store. Once completed import the backup file(.pfx) you created above into your IE browser. Then go to Tools > internet options > content > certificates > import, import the backup file(.pfx), during the import process mark the private key as exportable

Signing with the Vidual Basic Editor

To sign the files using the Visual Basic Editor:

VBA signing Office 2k & XP VBA Macros

Signing Microsoft Office 2k & XP VBA Macros with a Digi-Sign Digi-Code™

This document details the process needed to sign Microsoft Office 2K & XP VBA macros with a Digi-Sign Digi-Code™ certificate including a worked example. All web links are provided for illustration purposes only, and are correct at time of publishing. It is recommended that the user checks for any updates that may become available since the publishing of this document.

Pre-requisites:

Preparation:

Download the PVK import tool from Microsoft (pvkimport.exe).
http://www.microsoft.com/downloads/details.aspx?familyid=F9992C94-B129-4... [8]

Obtain your code signing certificate from Digi-Sign here.

Procedure:

2. Open a command-prompt and change to the folder where you installed pvkimport. (c:\codesign\).

3. Combine your SPC and PVK certificate/key files that you received from Digi-Sifn into a PFX file using pvkimport: (c:\codesign> pvkimprt –pfx c:\codesign\mycert.spc c:\codesign\mycert.pvk)
This will start a wizard.

Enter a password [PIN Code]
Choose options:

4. Install your Digi-Code™ certificate in Windows registry.

5. You can check the private key has been imported successfully by using MMC. Open MMC, select add/remove snap in and select certificates for your personal certificate store. Opening your code signing certificate should show code signing usage and that you have the private key corresponding to the certificate.

6. Within your MS Office document, open the Visual Basic editor from the Tools – Macro
menu.

7. Open the VBA project you wish to sign, and select Digital Signature from the Tools menu.

8. Select Chose from the Digital Signature window and choose your code signing certificate that you
wish to use to sign your VBA macro.

9. Click OK followed by Save, close to return to your Office document. Your macro is now digitally signed.