Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Code signing certificate for windows QuickConnect

This thread has been viewed 2 times
  • 1.  Code signing certificate for windows QuickConnect

    Posted Apr 20, 2015 04:56 AM

    Hi!

     

    How do you guys solve the ugly untrusted warning showed to windows machines while downloading Windows QuickConnect during the onboard process?

     

    We have just bought a third party certificate for the RADIUS/web server with SAN names etc and would love to solve the warnings without having to buy another third party certificate for code signing. I guess you need a code signing extension that´s not included in a normal RADIUS certificate?

     

    Does Aruba have any solution/code signing certificate we can use to sign their code?



  • 2.  RE: Code signing certificate for windows QuickConnect
    Best Answer

    EMPLOYEE
    Posted Apr 20, 2015 08:18 AM
    Yes, you would need to upload your organization's code signing certificate which will be used for both the Windows exe and Apple profile signatures.


    Thanks,
    Tim


  • 3.  RE: Code signing certificate for windows QuickConnect

    Posted Apr 20, 2015 08:40 AM

    Thanx for your reply,

     

    And if they don´t have a code signing certificate in this organization, the only way is to buy a third party code signing certificate or live with the warnings?



  • 4.  RE: Code signing certificate for windows QuickConnect

    EMPLOYEE
    Posted Apr 20, 2015 12:15 PM
    Correct.


  • 5.  RE: Code signing certificate for windows QuickConnect

    Posted Apr 24, 2015 11:58 AM

    I got a quick question regarding this.

    I have just implented a code signing certificate, but still get that smarscreen warning from windows 8.1

    There seem to be something called an extended validation code signing certificate you can aquire for immediate reputation with Windows smartscreen. The EV code signing certificate seem to arrive in USB tokens though, with a PIN required to use the private key and sign your code, and that doesn't sound like it's possible to upload to the clearpass.

     

    Has anyone been successful in removing the smartscreen warning by using a "normal" code signing certificate?