Hi,
does anybody know what’s the current story with the USD99,00 offer from Verisign
for a CodeSigning certificate. If I go to the Microsoft page
https://winqual.microsoft.com/Help/obtaining_a_verisign_class_3_digital_id.htm,
here is a link at the bottom saying that the CodeSigning Certificate is currently
available for USD99. If I follow the link to Verisign
https://products.verisign.com/orders/enrollment/winqualOrder.do
the only quote is for the regular price.
I’ve spoken to Verisign, they say the offer has been terminated since 4. Jan.
2012. If I speak to the Microsoft WinQual support, they say it is still open. What
is the real situation? or has it just been limited to certain parts of the world.
(Microsft Winqual support says if they follow the link, they still get the
promotional price on the Verisign page)
Thanks,
Charles
On 1/20/2012 1:48 AM, Charles wrote:
does anybody know what’s the current story with the USD99,00 offer from Verisign
for a CodeSigning certificate. […]
This is consistent to what I found out earlier:
- The VeriSign $99/y discount is for Winqual Submission only
=> you get a cheaper certificate for WinQual sign-up,
and for signing your WHQL submissions.
http://www.verisign.com/code-signing/content-signing-certificates/winqual-developers/index.html
=> Looks to me that if you exclusively WHQL your code, this certificate
should be all you need. Also you need this to register for WER.
- The standard “KMCS signature” needs a normal KMCS cert for $499/y
http://www.verisign.com/code-signing/microsoft-authenticode/index.html
=> If you want to deploy your drivers without WHQL. Or if you want to
code-sign other (non-kernel) components, you also need this one.
(Not necessarily from VeriSign, however. Other offers exist.)
Actually, I believe it is not the case. Even though the web site
states that it is good for WinQUAL users only, the $99 cert is an full
blown VeriSign cert that can be used just like a regular cert. In
fact, we just bought the $99 cert and are using it to sign our
installers and it works just fine. So I believe that the statement
from the web site might be a bit confusing. It probably means “if you
are a WinQUAL user, then you can get this VeriSign cert for $99 for
the first year…”. This makes sense because after the first year
promotion, you have to pay the full price to renew it, which is $499.
Hao
On Fri, Jan 20, 2012 at 9:42 AM, Hagen Patzke wrote:
> On 1/20/2012 1:48 AM, Charles wrote:
>>
>> does anybody know what’s the current story with the USD99,00 offer from
>> Verisign
>> for a CodeSigning certificate. […]
>
>
> This is consistent to what I found out earlier:
>
> - The VeriSign $99/y discount is for Winqual Submission only
> => you get a cheaper certificate for WinQual sign-up,
> and for signing your WHQL submissions.
>
> http://www.verisign.com/code-signing/content-signing-certificates/winqual-developers/index.html
>
> => Looks to me that if you exclusively WHQL your code, this certificate
> should be all you need. Also you need this to register for WER.
>
>
> - The standard “KMCS signature” needs a normal KMCS cert for $499/y
>
> http://www.verisign.com/code-signing/microsoft-authenticode/index.html
>
> => If you want to deploy your drivers without WHQL. Or if you want to
> code-sign other (non-kernel) components, you also need this one.
> (Not necessarily from VeriSign, however. Other offers exist.)
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
Hao Wang wrote:
Actually, I believe it is not the case. Even though the web site
states that it is good for WinQUAL users only, the $99 cert is an full
blown VeriSign cert that can be used just like a regular cert. In
fact, we just bought the $99 cert and are using it to sign our
installers and it works just fine.
How would you know if it didn’t?
The user-mode signature check is not as strict as KMCS. KMCS requires a
class 3 code signing certificate. In Certificate Manager, under
Enhanced Key Usage, it must include “Code Signing (1.3.6.1.5.5.7.3.3)”.
–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.
Charles wrote:
I’ve spoken to Verisign, they say the offer has been terminated since 4. Jan.
2012. If I speak to the Microsoft WinQual support, they say it is still open. What
is the real situation? or has it just been limited to certain parts of the world.
(Microsft Winqual support says if they follow the link, they still get the
promotional price on the Verisign page)
They may be the victim of overaggressive caching. I’m in the US, and I
no longer see the $99 offer.
–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.
On 1/20/2012 1:23 PM, Tim Roberts wrote:
Charles wrote:
> I’ve spoken to Verisign, they say the offer has been terminated since 4. Jan.
> 2012. If I speak to the Microsoft WinQual support, they say it is still open. What
> is the real situation? or has it just been limited to certain parts of the world.
> (Microsft Winqual support says if they follow the link, they still get the
> promotional price on the Verisign page)
They may be the victim of overaggressive caching. I’m in the US, and I
no longer see the $99 offer.
It does appear at
http://www.verisign.com/code-signing/content-signing-certificates/winqual-developers/index.html
On Fri, Jan 20, 2012 at 12:07 PM, Tim Roberts wrote:
> Hao Wang wrote:
>> Actually, I believe it is not the case. Even though the web site
>> states that it is good for WinQUAL users only, the $99 cert is an full
>> blown VeriSign cert that can be used just like a regular cert. In
>> fact, we just bought the $99 cert and are using it to sign our
>> installers and it works just fine.
>
> How would you know if it didn’t?
>
> The user-mode signature check is not as strict as KMCS. KMCS requires a
> class 3 code signing certificate. In Certificate Manager, under
> Enhanced Key Usage, it must include “Code Signing (1.3.6.1.5.5.7.3.3)”.
We just verified our $99 cert and it is a class 3 code signing cert,
with the sequence (1.3.6.1.5.5.7.3.3).
The Microsoft link below does specify that a class 3 is needed for
some WinQual applications, and also states clearly that the $99 cert
meets the requirements:
https://winqual.microsoft.com/help/obtaining_a_verisign_class_3_digital_id.htm
Also, we bought this cert last week, so I believe that the offer is
still there. In case you need the link:
http://www.verisign.com/code-signing/content-signing-certificates/winqual-developers/index.html
Hao
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
Thanks for the Links,
but it you (well, me at least) first here
http://winqual.microsoft.com/help/default.htm#winqual_requirements.htm
and then here
https://www.verisign.com/code-signing/microsoft-authenticode/index.html
which only shows the regular USD 499 price. It looks as if the Verisign answer was
the correct one.
Sorry to have to say this, but when it comes to reliable price/product
information, my experience of the last year has been that at Microsoft one left
hand doesn’t know what the other is doing. Not quite the same product-league but,
after the MS hotline told me that “of course” the full version of Office
Home/Business 2010 and Visio 2010 would install and run on Windows 2003 Server, I
purchased them only to find out that they wouldn’t even install. Through my
Software supplier I later found out that the Volume license version were a) about
10% cheaper and b) did run and install on W2K3 Server. Now I’m left with the
Office Products on my shelf and about EUR1,200 more on expenses than would have
been required. I’m just too busy to pass this on to a lawyer … But it does
increase my sympathy for people who decide to “purchase their software license later”
Am 20.01.2012 19:33, schrieb James Bellinger:
On 1/20/2012 1:23 PM, Tim Roberts wrote:
> Charles wrote:
>> I’ve spoken to Verisign, they say the offer has been terminated since 4. Jan.
>> 2012. If I speak to the Microsoft WinQual support, they say it is still open. What
>> is the real situation? or has it just been limited to certain parts of the world.
>> (Microsft Winqual support says if they follow the link, they still get the
>> promotional price on the Verisign page)
> They may be the victim of overaggressive caching. I’m in the US, and I
> no longer see the $99 offer.
>
It does appear at
http://www.verisign.com/code-signing/content-signing-certificates/winqual-developers/index.html
Well, just to pass on the latest piece of information I have, I just actually
managed to speak to somebody at Verisign who sounded confident and knowledgable
about what he was telling (on of the numbers on the link below, no chat line, no
email loops through some call centre somewhere …)
He told me the following story:
a) Verisign no longer offers the WinQual signing setup for USD99,00
b) Microsoft does still offer the WinQual signing setup for USD99,00
(apparently, they pay the rest) but you have to get a promotion code from
Microsoft which you enter in the Verisign order page
So after two days exchanging mail with xxxxx@microsoft.com, my experience
repeats itself. If you need any pricing information for a Microsoft product, go
ask somebody else.
Am 20.01.2012 19:33, schrieb James Bellinger:
On 1/20/2012 1:23 PM, Tim Roberts wrote:
> Charles wrote:
>> I’ve spoken to Verisign, they say the offer has been terminated since 4. Jan.
>> 2012. If I speak to the Microsoft WinQual support, they say it is still open. What
>> is the real situation? or has it just been limited to certain parts of the world.
>> (Microsft Winqual support says if they follow the link, they still get the
>> promotional price on the Verisign page)
> They may be the victim of overaggressive caching. I’m in the US, and I
> no longer see the $99 offer.
>
It does appear at
http://www.verisign.com/code-signing/content-signing-certificates/winqual-developers/index.html
> we just bought the $99 cert and are using it to sign our
installers and it works just fine.
TECHNICALLY, the $99 certificate is a full class-3 code-signing
certificate. Of course it works also for Authenticode signing.
LEGALLY, VeriSign only allows you to use this $99 certificate for
Winqual submissions. (At least this is how I understand their statements.)
Formerly they called this “Organizational ID” and there was one page
that listed the comparison, clearly stating that the “Organizational ID”
may not be used for code signing.
If you use the $99 cert for anything else than WinQual signup and WHQL
submissions, well, then VeriSign can any time in the future prove (a) it
is their certificate and (b) you used it for a non-licensed application.
Then a nice lawyer of theirs could ask you very nicely to upgrade and
pay the difference to their regular $499 offer. Or more.
It’s your choice. And it is your risk.