Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Home NTDEV
Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

More Info on Driver Writing and Debugging


The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.


Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/


Cheapest EV code signing certificate 2019

RourkeRourke Member Posts: 53

In my experience, there doesn't seem to be any sort of qualitative advantages and cost is the only factor in selecting a certificate source. I've used symantec, digicert, and globalsign in the past. Looking around I see digicert has doubled their price to $664 / year which is a little scary of a trend as we are at the whims of these people's prices. On the other hand Sectigo can be found for just $250 / year. Is Sectigo or any other alternative a good way to go?

Comments

  • Tim_RobertsTim_Roberts Member - All Emails Posts: 13,446

    The Sectigo web site says $290/year for a 3-year cert. I am also very curious to know if this works, and if there is a cross-cert for the older systems, assuming Microsoft backs off of their fascist policy to kill the cross-certificate authority.

    This whole thing pisses me off enormously, as I posted a couple of months ago. When the EV need became clear, I got one from Digicert for about that price. Two years later, the price had doubled, and two years later it has doubled again. All of that for a product that requires ZERO human intervention and has ZERO incremental cost to them. It is criminal. I did not renew mine, the first time in 15 years I've been without a certificate. Hopefully, I will retire before I need one.

    Tim Roberts, [email protected]
    Providenza & Boekelheide, Inc.

  • RourkeRourke Member Posts: 53

    I am reluctant to put in a direct link, but currently aboutssl.org offers the Sectigo EV code signing certificate for $224/year.

  • Martin_DrábMartin_Dráb Member - All Emails Posts: 81

    For about five years now, I am using a code signing certificate from Certum. It is not an EV one since I do not have a company name yet (that should hopefully change in several weeks' time). Their certificates were reasonably cheap and their process identity verification was/is more friendly to Central Europe users than that of e.g. Symantec (at least for guys inexperienced in these matters as I had been).

    However, it seems they also made their EV certs a little bit more epxensive.

    Martin Dráb

  • Eric_WittmayerEric_Wittmayer Member Posts: 48

    @Rourke & @Tim_Roberts
    You should get a big discount in the price if you go through from this MSFT page.
    For instance, when I use the Digicert link from that page, an EV cert is only $104/year vs the $664 if you go from their main page.

    Hope this helps.
    Eric

  • Peter_Viscarola_(OSR)Peter_Viscarola_(OSR) Administrator Posts: 7,847

    Very good hint.

    Indeed Digicert and others have had “specials” before... but I always lose track of them, they expire, or they have a purpose that doesn’t quite fit.

    The direct link to use from the MSFT page Mr. Wittmauer points to is this: https://www.digicert.com/friends/sysdev/

    Thanks, Mr. Wittmayer!

    Peter

    Peter Viscarola
    OSR
    @OSRDrivers

  • Tim_RobertsTim_Roberts Member - All Emails Posts: 13,446

    But, as far as I can tell, there's no way to use that link if you already have a Digicert account. The link then goes straight to their "dashboard", where the price remains at the totally outrageous $664/year. I suppose I could just create another account.

    Tim Roberts, [email protected]
    Providenza & Boekelheide, Inc.

  • Eric_WittmayerEric_Wittmayer Member Posts: 48

    Hi @Tim_Roberts ,
    We didn't have create a completely new account, I didn't do the purchase myself but I believe once you have the discounted one in your cart you can login to your current account? We just couldn't "renew", which for the savings wasn't an issue.

    Thanks @Peter_Viscarola_(OSR) I've had consitent luck in getting a discount by using the links in the Microsoft instructions for signing driver submissions, whatever they happened to be at the time.

  • RourkeRourke Member Posts: 53

    The discount page is now gone. The link now goes to a page asking $699 USD/year for an EV cert.

  • Tim_RobertsTim_Roberts Member - All Emails Posts: 13,446

    Just last week, I took ownership of a 2 year EV cert from GlobalSign for $720. It's still a lot of money, but it's one hell of a lot cheaper than DigiCert. They have permanently lost a customer, and I'm telling everyone I know. I'm still pissed off about this. Given the incremental cost to them of a renewal, what Digicert is doing is nothing more than larceny.

    Tim Roberts, [email protected]
    Providenza & Boekelheide, Inc.

  • kalpeshpatelkalpeshpatel Member Posts: 1

    I found Sectigo EV Code Signing Certificate at only $224/year a trusted reseller CodeSigningStore - https://codesigningstore.com/code-signing/sectigo-ev-code-signing

    Software Consultant.

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
Kernel Debugging 30 Mar 2020 OSR Seminar Space
Developing Minifilters 15 Jun 2020 LIVE ONLINE
Writing WDF Drivers 22 June 2020 LIVE ONLINE
Internals & Software Drivers 28 Sept 2020 Dulles, VA