How do I create a Digital Signature using MS Win 2003 SBS?

[JW]

Can I get Microsoft Certificate Server to create a Digital Signature
>> that I can use for Access 2003.
Right now we have to have security set to Low in Access in order to use
it properly. We would like to set up a Digital Signature so we can
raise that security level to High. I have heard that Windows Server
2003 has the ability to "create" a digital Signature that can be used
for this purpose?

Below is a response I received from another board. Can anyone give me
directions on how I would create the Digital Certificate with MS Win
2003 SBS?

Thanks,

Jason

"As I understand it, yes, but the certificate is valid only within the
domain
in which it was created - all users using the certificate must be logged on
to the same domain. I also believe that users will have to choose to trust
the certificate before you can set the security level to high - I see that
the dialog box says 'only signed macros from trusted sources' will be
allowed to run.

You would probably get a more detailed answer in a Windows Server
newsgroup."

-- Brendan Reynolds (MVP) http://brenreyn.blogspot.com

[JW]

Bob, Thank you very much for the detailed response, it worked like a
charm.
So I now have a Domain Controller certificate and a User Certificate.
Can you tell me how to apply the User Certificate so that I can raise my
Access macro security level to Medium or High, or can you point me in
the direction of a good web-site that explains this?
We have about 15 users that can use our Access Database. Will I need to
install the digital signature on each each machine.

Thanks again,

Jason

Bob P wrote:

> Sure thing. From the server, got to Administrative Tools, then
> Certification Authority. Under 'organization name', right click on
> the 'Certificate Template' sub. Select 'New', 'Certificate Template
> to Issue'. Then just pick Code Signing Certificate from the list.
>
> Now when you go to http://servername/certsrv, you'll have a choice for
> a Code Signing Certificate.

[JW]

Thank you very much for your help!

Jason

Bob P wrote:
> Here's what you need to do:
>
> -Get a code signing certificate on your machine
> -Open the Access database, go to macro, Visual Basic editor
> -Open tools, digital signature, choose your code signing certificate
> -Your project should now be signed
> -Everyone in your domain should be able to open the project with the
> medium or high security
>
> I'm doing this from memory, the machine I'm posting from doesn't have
> Access, so I may have missed a step but that should be the basics

[JW]

Bob,

I am following your instructions and they are pretty much right on.
However when I try and create the "Code Signing Certificate" it is not
in my list to choose from. When I look at the Issued Certificates list
the following two are listed.
-Domain Controller Certificate
-User Certificate

When I open follow the instructions to open Access Database and goto the
Visual Basic Editor. Then to tools, digital signature and choose your
code signing certificate, there are none in the list to choose from.

I am having a hard time figuring out where I have gone wrong.

I appreciate all the help,

Jason

[JW]

Bob,

I am following your instructions and they are pretty much right on.
However when I try and create the "Code Signing Certificate" it is not
in my list to choose from. When I look at the Issued Certificates list
the following two are listed.
-Domain Controller Certificate
-User Certificate

When I open follow the instructions to open Access Database and goto the
Visual Basic Editor. Then to tools, digital signature and choose your
code signing certificate, there are none in the list to choose from.

I am having a hard time figuring out where I have gone wrong.

I appreciate all the help,

Jason

Bob P wrote:

> Here's what you need to do:
>
> -Get a code signing certificate on your machine
> -Open the Access database, go to macro, Visual Basic editor
> -Open tools, digital signature, choose your code signing certificate
> -Your project should now be signed
> -Everyone in your domain should be able to open the project with the
> medium or high security
>
> I'm doing this from memory, the machine I'm posting from doesn't have
> Access, so I may have missed a step but that should be the basics
>
>
> On Mon, 30 Aug 2004 16:15:57 -0400, JW <non...@noneya.com> wrote:
>
>

[JW]

I have a Code Signing Certificate now for sure on the Server.
I tried opening our database and adding the certificate throught the
Visual Basic Editor. When I go to choose the Code Signing Certificate,
there is nothing in the box. There is no list at all to choose from.
Is that because I am trying to add the Certificate from my machine
instead of from our server?

Thanks again for taking the time to answer my questions,

Jason

Bob P wrote:

> When you go to http:\\servername\certsrv, make sure you you pick:
>
> Select a Task: Request a certificate
>
> then
>
> Submit an advanced certificate request
>
> then
>
> Create and submit a request to this CA.
>
>
> and pick Code Signing from the drop down list