I have created a certificate to self sign a project. Users of the code
install the certificate in their "Trusted Root Certification Authorities"
folder. After the appropriate warning, of course.

Microsoft says
(http://office.microsoft.com/en-us/ex...05249558.aspx),
"Microsoft Office will only trust a self-signed certificate on a computer
that has the private key for that certificate available (generally only the
computer that actually created the certificate, unless the private key is
shared with other computers)."

Question 1: Does that mean that even if they install my certificate in the
trusted location that they cannot have their macro security set on high?

Question 2: How does one share the private key?

Question 3: Does that mean that the computer it is shared with can also
sign projects and make them look like they came from me?


Thanks!!

You cannot export the key for SelfCert signatures to other stand-alone
computers.

Only good for use on the computer on which they are created.

If on a network with a shared store the key will be available to all.

I don't run on a network so cannot suggest how to set up a shared store.

But, you do not need the signature if users store your workbook in a "Trusted
Location"

I do not mean "trusted root certification authorities" in MMC

I mean in Excel under ButtonExcel OptionsTrust CenterOptionsMacro Security.


Gord Dibben Excel MVP


On Tue, 08 Jun 2010 09:28:07 -0400, wrote:

I have created a certificate to self sign a project. Users of the code
install the certificate in their "Trusted Root Certification Authorities"
folder. After the appropriate warning, of course.

Microsoft says
(http://office.microsoft.com/en-us/ex...05249558.aspx),
"Microsoft Office will only trust a self-signed certificate on a computer
that has the private key for that certificate available (generally only the
computer that actually created the certificate, unless the private key is
shared with other computers)."

Question 1: Does that mean that even if they install my certificate in the
trusted location that they cannot have their macro security set on high?

Question 2: How does one share the private key?

Question 3: Does that mean that the computer it is shared with can also
sign projects and make them look like they came from me?


Thanks!!