Chapter 16: Isolating Applications Using Application Isolation Wizard
Digital Signatures
1350
ADS-0950-UG00
AdminStudio 9.5 User Guide
Digital Signatures
Like conventional signatures, digital signatures identify you (or your organization) to end users. In the context of
application isolation, a digital signature identifies you or your organization as the creator of shared assemblies.
This ensures that the identity of a shared assembly can be verified for authenticity. Digital signatures in the
Application Isolation Wizard™ require a combination of a digital
certificate
and a
code signing technology
.
Certificates
Digital certificates identify you and/or your company to end users to assure them the assembly they are about to
use has not been altered. They are issued by a certification authority such as
VeriSign
, or created using a
combination of software publishing credentials (
.spc
) and a private key (
.pvk
), both also issued by a certification
authority. The certificate includes the public cryptograph key, and, when used in combination with a private key,
can be used by end users to verify the authenticity of the signor.
You can create a certificate file from the constituent PVK and SPC files and import it into the
Certificate Store
using
the
PVK Digital Certificate Files Importer
. You can then export the certificate (
.cer
) file for use outside of the
certificate store.
Caution •
Certificate files must be 2048-bit or higher. For more information, see the article:
Assembly Signing
Example
on the
Microsoft Developer Network
Web site.
Code Signing Technologies
The Application Isolation Wizard™ supports two code signing technologies:
Table 16-3 •
Supported Code Signing Technologies
Technology
Description
Credentials
Credentials consist of both
Software Publishing Credentials
(.spc file) and a
private
key
(.pvk file). These two files are required in conjunction with the certificate to sign
shared assemblies.
Certificate Name in
the Store
Using Microsoft’s
Certificate Store
technology, the combined software publishing
credentials and private key can be placed in a repository for multiple uses. The name
of the certificate is provided as opposed to the constituent files in the Credentials
code signing technology.
Summary of Contents for ADMINSTUDIO 9.5
Page 1: ...AdminStudio 9 5 User Guide Version 9 5...
Page 50: ...Contents 50 ADS 0950 UG00 AdminStudio 9 5 User Guide...
Page 52: ...52 ADS 0950 UG00 AdminStudio 9 5 User Guide...
Page 156: ...156 ADS 0950 UG00 AdminStudio 9 5 User Guide...
Page 440: ...440 ADS 0950 UG00 AdminStudio 9 5 User Guide...
Page 1090: ...1090 ADS 0950 UG00 AdminStudio 9 5 User Guide...
Page 1426: ...1426 ADS 0950 UG00 AdminStudio 9 5 User Guide...
Page 1686: ...1686 ADS 0950 UG00 AdminStudio 9 5 User Guide...
Page 1794: ...Chapter 24 AdminStudio Public API Reference 1794 ADS 0950 UG00 AdminStudio 9 5 User Guide...
Page 1842: ...Index 1842 ADS 0950 UG00 AdminStudio 9 5 User Guide...
