How to create DIGITAL SIGNATURE by VBA ?

[sthanawa]

Hi All ,

When we are openning the Excel file that contained VBA code , usually it will prompt asking for Close or Open Macro.

I know this problem must solve by add digital signature. But I can not add my digital signature to all computers that using my Excel file.

How can I do ?

 

[agihcam]

try;
Digitally sign a macro project
Make sure you have at least one digital certificate before you try to sign a macro project

Open the workbook or template that contains the macro project you want to sign.


On the Tools menu, point to Macro, and then click Visual Basic Editor.


In the Project Explorer, click the project you want to sign.


On the Tools menu, click Digital Signatures.


Do one of the following:
To use the current certificate, click OK.

To use a different certificate, click Choose, select the certificate you want, click OK, and then click OK again.

 

[Oorang]

Not to hijack the thread here, but I have always been unclear on this... Where do you obtain a digital signature?

 

[Oaktree]

Hi, Oorang.

Run SELFCERT.EXE. It's likely under Program files --> Microsoft Office --> Office10

 

[Oorang]

I thought selfcert only worked for the machine on which it was created?

 

[Oaktree]

You'd create a digital signature using SELFCERT.EXE, sign your code, and have everyone else add you as a trusted source so that your macros would run on their machines. See "About Digital Signatures" in Excel help for a better explanation...

 

[Greg Truby]

@ Aaron:
I talked to Joe 'bout this a couple of years ago:

http://www.mrexcel.com/board2/viewtopic.php?t=114736

<hr />

@sthanawa:

AFAIK you cannot go about programmatically installing digital signatures. Seems to me that this would open the door for virus writers to find approved digi-sigs and spoof them.

 

[Greg Truby]

FWIW - I Googled about a bit and I'm not finding any "how to's" on creating some type of network-based list of accepted digital signatures that would be automatically added to a user's security profile upon login. If such an animal exists, I am not finding it.

 

[Oorang]

Hi Greg,
Thanks for the post it was pretty informative. Unfortunatly it was informative enough to tell me that it's not quite the solution I am looking for. I see from your post that it will still require the user to change their security settings. I was looking for something that could allow the user to keep their setting on at reasonably high levels (particularly not allowing trust access to the VB project.), but still allowing our company code to run. As I advance in skill I am writing programs that access the VBIDE and I really hate for our users to be running around with those settings turned down. If we spring for a mainline cert will that still be an issue?

 

[Greg Truby]

You only need drop the fences while you install your digi-sig. You may hafta close & re-open the file to enable the "alway trust..." checkbox. But once you check that "always trust..." checkbox, you can raise security back to high. I do it all da time.