Purchasing a Code Signing Certificate for Windows From Tucows
IMPOARTANT: You need to use a Windows computer for the purchase process. I use IE (version 9) as well which is what Tucows recommends. Do not use IE 10.
Log into Tucows
You will need an account at https://author.tucows.com/ in order to purchase a Code Signing Certificate.
Once you have signed up and logged in select Code Signing Certificates from the RESOURCES menu.
Specify How Long Your Certificate Will Be Valid
You can purchase a certificate that is valid for 1 to 3 years. Note that your applications will still be signed after your signing certificate expires (assuming you use the timestamp server when signing your executables). Even if you purchase a certificate that is valid for 1 year it just means that you can only sign executables for 1 year before you have to renew.
Purchase
Go through the purchase process.
Start Comodo Code Signing Certificate Process
After you complete your purchase you will be taken to this screen. Now you need to get the certificate creation process started with Comodo. Click on the X year Comodo Code Signing Certificate.
Grant Access
You will see this prompt during the process. Just click Yes.
Fill Out Forms
This is the first screen you will see on the Comodo site (look at the URL in your browser, you are no longer on the Tucows site).
If you have purchased a certificate previously then just login. I have purchased a certificate before so I will login. If you don't already have an account with Comodo then you may have to answer questions not shown in this article. I don't have screenshots of that process, however.
Settings to Use
- I enter my company support email address. This email address will show up in the Windows property inspector when people look at your digital signature.
- I use the default key options.
Example of email address
This is where the email address shows up in the Windows file property inspector.
Provide rest of required information
The information you have to provide will vary depending on whether or not you already have an account. Since I have an account I just have to accept an agreement.
Completing the Initial Registration
Once you get to this screen you have completed the first stage of registration. Now you have to wait for Comodo to approve your certificate request before you can retrieve your signing certificate.
You will receive an email like the one listed below at some point after completing your order. I placed my order on Friday and received the email on Monday. This just means that Comodo has started processing your order.
At this point Comodo will start verifying that your company really exists prior to issuing the certificate.
Matthias Rebbe
It is very important to know, that the verification process of Comodo for EU customers is more complicated. Comodo tries to verify the registrants data using public information. This seems to be easy for US residents. But for EU residents this seems to be not possible. I needed to visit a German notary who then had to confirm that i am really the person who has registered. The notary had to answer a phone call from Comodo for this. Of course this is not without addtional costs. I had to pay the notary for his service. At least it worked for me. But i recommend to purchase a 2 or 3 years certificate.