×

First time here?

You are looking at the most recent posts. You may also want to check out older archives. Please leave a comment, ask a question and consider subscribing to the latest posts via RSS or email. Thank you for visiting!

Thawte logoAnd the offers keep coming in!  Another one of our key partners for testing XAP signing for trusted applications was Thawte.  Their group helped provide us with valid certificates to verify their process and signing worked as expected (and verified) for Silverlight 4.  Today I just got an email from their marketing department that they would like to offer Silverlight developers a discount on Thawte code-signing certificates to $89 for a 1-year…about 70% off their current rate.  That’s pretty amazing of them to do.

Here’s their terms and details on how to get it…

Terms

  • For developers of XAP code for Microsoft Silverlight 4
  • Get a single-year code signing certificate for US $89 (over 70% off), or a two-year code signing certificate for US $178 (over 67% off)
  • For new Microsoft Authenticode code signing certificates or renewal of existing Microsoft Authenticode certificates
  • Enter promotional code MSSILVER when prompted during certificate enrollment/renewal
  • Offer expires 01-June-2010, so chop-chop!

How to get the certificate

  • Have your enrollment information and credit card ready, and go to http://www.thawte.com/code-signing
  • In the Thawte Code Signing Certificate for Microsoft Authenticode section, select the certificate term desired (1 year or 2 years), then click either Buy or Renew.
  • This will launch Thawte Certificate Center, where customers enroll for and manage their SSL and code signing certificates.
  • The first page will confirm your choice of code type and certificate validity period.
  • At the bottom of the page, enter the promotional code MSSILVER. Click the yellow Continue button to see the updated (lower) price applied in real-time.
  • Simply continue the process to complete the certificate enrollment.
  • The authentication process usually takes about 2 weekdays. Thawte will keep you updated throughout the process.

NOTE: I will say that I recall the Thawte certificate process requiring IE7 or earlier and it did not work well with IE8/Win7.  It actually issued, but there was no way to export the PFX.  Please heed this advice.  Fire up Windows XP Virtual PC like I did and issue the request and use the same machine to pick it up and export.  This is, of course, unless they have indicated they’ve got it working on IE8 now.

Other conditions and stuff to know…

  • Thawte code signing certificates are issued to organizations for a specific type of code, such as (in this case) Microsoft Authenticode which will cover XAP developers. Since the certificate is issued to the organization and not the code, the certificate can be used to sign any instance of that type of code generated by the organization, over the entire lifespan of the certificate.
  • Thawte code signing certificates follow an authentication process which is very similar to the organization authentication process for Thawte SSL Web Server Certificates, which usually takes about 2 weekdays. Because the organization authentication process is so similar, customers who already have at least one active Thawte SSL certificate will save time, as their organization has already been authenticated.
  • To confirm eligibility for the offer, Thawte’s sales or authentication representatives may require verification that the customer is developing XAP code for Silverlight.

Before you start laying on the comments below, yes we all know there are a multitude of ways to get these certificates.  Thawte reached out to me to ensure that Silverlight developers are aware they can get this promotional discount as well.  If you are an existing Thawte customer you can renew your certificate as indicated in the terms above.  If you have questions, please contact their customer service area.

For more information on XAP signing and the reasons/benefits see these posts:

Thanks to Thawte for extending this promotion!



This work is licensed under a Creative Commons Attribution By license.


5/7/2010 11:52 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Mine was just up for renewal, great!
5/12/2010 5:28 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
LOL @ FAIL with IE8 ... that's just ridiculous ... the web breaks everytime we upgrade IE :(
Gravatar
5/14/2010 10:12 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Hey Tim, I just signed up and received my code signing certificate from Thawte. Thanks for the tip!

One issue - and I used my XP mode Virtual PC within Windows 7 to use IE6 - is that I can't export the certificate as .PFX. When I start the cert export wizard, it never shows the "Private key" option yes/no, and the PFX format is greyed out. Is there something simple I'm missing? I appreciate any tips!
Gravatar
5/14/2010 12:19 PM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Well, I solved the issue with the help of Thawte customer support. Here are the steps:

1. Export your new Thawte Code Signing CA Certificate as a PKCS #7 (.P7B) file.
2. Rename this .P7B file to .SPC.
3. Locate your .PVK private key file (you saved it during the request process for the certificate).
4. Download and install the pvkimprt.exe tool from Microsoft www.microsoft.com/.../details.aspx
5. Run the pvkimprt tool, with the -PFX option, to create the PFX file.

More information on the last step is here:
search.thawte.com/.../index

-Dan
7/14/2010 5:56 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Any chance you can work with them to extend? We're just getting started with a new company on projects and this discount would help a bunch.

Thanks!
7/27/2010 8:51 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Big thanks to Dan for the heads up on exporting the certificate from a VM.
7/29/2010 11:21 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
My Thawte-signed xap file is not updating out-of-browser installations after renewing and signing the updated xap file with my renewal certificate. Had to go back to my old certificate which has not expired, to get xap to update OOB, but need a solution soon. The only difference seems to be the renewal certificate was issued by "Thawte Code Signing CA - G2" while the old one was simply "Thawte Code Signing CA" . Any ideas?
7/29/2010 5:24 PM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Gary: Help me understand your scenario? You signed a XAP once, and have renewed with a different CA and re-signed? The update method for signed XAPs requires the same signing authority to be used...otherwise the actual signatures are different. I tried to email direct, but the email you left was invalid.
7/30/2010 5:59 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Thanks, Tim. I renewed my Thawte certificate without making any changes to the order, but the renewal certificate issuer has "-G2" added to the end of the issuer name. So the issuer is now "Thawte Code Signing CA-G2" instead of simply "Thawte Code Signing CA"

So my OOB installation does not auto update with the new certificate.

I have corrected my email address: gsiegel@altastar.com
7/30/2010 8:39 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Gary - yes, the name of the CA would cause a difference in the signature and invalidate the ability to see them as the same. This is actually something we are looking to address in future versions of Silverlight.
7/30/2010 10:05 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Thanks again, Tim. It is important for future versions, especially seeing that the developer, as in my case, may not have control over when the certificate issuer is changed.

For my current users, is there any solution, other than having them uninstall and reinstall OOB?
8/2/2010 7:57 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Gary -- unfortunately no there isn't a good workaround for that right now.
3/3/2012 8:39 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Silverlight is like adobeair right ?
3/3/2012 11:58 PM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Thank you, will grab my copy of certificate soon
3/4/2012 5:45 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Thank you nice information.
3/12/2012 4:57 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
I believe they have offers all the time. Right now the following coupon code is ative: SUPER10OFF (I believe)...

Try it out!
6/29/2012 6:56 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Thank you, it is very useful and knowledgeable
7/28/2012 9:41 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
name of the CA would cause a difference in the signature and invalidate the ability to see them as the same
4/24/2014 4:54 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
Is promotional code MSSILVER still available? It's good to know that it works not only with .NET assemblies, but also works with Silverlight XAP files.
4/24/2014 8:27 AM | # re: Silverlight XAP Signing Certificate promotion from Thawte
@Ted - no these were one-time promotions.

 
Please add 7 and 7 and type the answer here:

DISCLAIMER:

The opinions/content expressed on this blog are provided "ASIS" with no warranties and are my own personal opinions/content (unless otherwise noted) and do not represent my employer's view in any way.