'NET Connected Logo Obtaining a Verisign ID

1
.NET Connected LogoObtaining a Verisign ID
A Step-by-Step Guide to Using a Digital Signature
2
Preparation

• Step One Acquire a VeriSign IDThe first step in
  the process is to ensure that you have a current
  VeriSign ID. If you already have a VeriSign ID,
  then go to Step 2.
• To acquire a VeriSign ID, go to
  http//www.verisign.com/products/winlogo/
• Step Two Get a Qualification Service Account.
• If you already have a Qualification Service
  Account, then go to Step 3.
• Before applying for a Qualification Service
  Account, you should ensure that you have the
  following information
• Contact information for one primary and one
  secondary account administrator. Only account
  administrators can add or remove users, and
  change user and company information.
• Billing information for your company. Note
  Billing information is only necessary to set up
  an account, we will not be charging your account.

3
Preparation, Part II

• To establish a Qualification Service account,
  part I
• To ensure that your browser settings are correct,
  go to https//winqual.microsoft.com/ocxnoload.asp
  .
• Go to the Qualification Service home page.
• Under Qualification Service, click Establish a
  Qualification Service account. A dialog box
  appears "WinQual needs to install software in
  order for you to proceed".
• Click OK.
• Under Select Company, click Not Listed, and then
  click Continue.
• Download the WLPQS.exe File for VeriSign
  Identification.When asked, "Would you like to
  open the file or save it to your computer?",
  click Save.Note Before continuing to part II,
  you need to have your digital signature ready.
  Follow the directions on pages 4 to 16 before
  continuing. Once you have prepared your digital
  signature, go to Establish a Qualification
  Service account, part II

4
Preparation, Part III

• Step Three Download Microsofts Authenticode
  Tools
• If you do not already have it, download it from
  here.
• Click download.
• Click Yes.
• Click Save.
• Select the area you want this files saved and
  click Save.

5
Starting the Digital Signature Wizard

• Double-click on Signcode.exe to start the
  Digital Signature Wizard. The dialog box to the
  right will open.
• Click Next.
• If you are an advanced user and feel completely
  comfortable this process, click here to skip the
  Wizard.

6
File Selection

• Click Browse to select the WLPQS.EXE file.
• To digitally sign the file, click Next.

7
Signing Options

• Select the type of signing you want for this
  file. The type of signed selected determines the
  future options available to you. Select Custom.
• Click Next to continue.

8
Signature Certificate

• Use the Select from File button to browse to find
  your digital signature. Note For security
  reasons, these files should be on a floppy disk
  and stored in a safe location.
• Click Next to continue.

9
Entering Private Key

• Use the Private key option. Find the private key
  on your computer using the Browse button.Note
  The private key is probably in the same directory
  as your certificate from the previous step.
• Click Next to continue.

10
Private Key Password

• Each Private Key comes with a password. This is
  supplied by the user that requested the Verisign
  ID. Please enter your password and click OK.

11
Select the Algorithm

• Select a hash algorithm.Note Microsoft
  recommends using the sha1 algorithm, but any of
  them should do.
• Click Next to Continue.

12
Additional Certificates

• Select the All certificates in the certification
  path , including the root certificate option.
• Select the No additional certificates option.
• Click Next to continue.

13
Data Description

• Note The fields on this page are optional. If
  you wish to skip these fields, click Next.
• Enter a description of what you are signing into
  the Description field.
• Enter the web location into the Web Location
  field.
• Click Next to continue.

14
Time Stamp

• Note The fields on this page are optional. If
  you wish to skip these fields, click Next.Click
  Add a timestamp to the data.
• Enter the following URL into the Timestamp
  service URL http//timestamp.verisign.com/scripts
  /timstamp.dll
• Click Next to continue

15
Completing the Digital Signature

• Review your signature as shown in the picture to
  the right.
• Once you are satisfied with the results click
  Finish.

16
End of the Digital Signature Wizard

• This window marks the successful completion of
  the Digital Signature Wizard.
• Click OK to complete the process.
• The next step is to complete the process of
  establishing a qualification service account.

17
Establishing a Qualification Service Account,
part II

• This page continues from slide 3. If you have
  questions about the previous steps, return to
  Preparation, Part II.
• Now that you have Digitally signed the WLPQS.exe
  file with your company's VeriSign Class 3
  code-signing ID, click Continue.
• Complete the remaining forms.
• Account Administrators can sign in to the
  Qualification Service immediately after
  establishing an account. Before you can make
  submissions, you must Set Make Logo and Test
  Signature Submission permissions. (In this
  case, you will need your permissions set to Yes).
  Your company might also need to View and accept
  legal agreements before they can make
  submissions.

18
End of the Digital Signature Wizard

• This window marks the successful completion of
  the Digital Signature Wizard.
• Click OK to complete the process.

19
Advanced Users Method

• For Advanced Users You can use the following
  command line to sign your file (instead of going
  through the wizard)

• Signcode spc a\mycredentials.spc
  v a\myprivatekey.pvk wlpqs.exe (name of the
  file you want to sign) (this is the location of
  your private key) (this is the location of your
  certificate)
• The next step is to complete the process of
  establishing a qualification service account.