How to Import the SST Code Signing Certificate

	LFNAlias Version 1.0

User Guide

How to Import the SST Code Signing Certificate

This page describes only one of several methods by which a digital certificate can be added to a user or computer's list of trusted certificates. But, particularly, if you have already downloaded a SST setup package, it is generally, the most convenient.

Preamble
Normally, adding a certificate manually, particularly a self-signed certificate (including ours) to a trusted certificate store, is not something we would recommend. However, we are currently pressed for time, the release of our products having taken far too long already. Furthermore,
•	due to their importance, criminals and governments have set up (or tolerate) digital certificate authorities which sell/distribute certificates of questionable or unsafe provenance, which does not make all commercial certificates entirely reliable either.
•	Widely trusted certificates, from trustworthy, commercial, certificate authorities don't come cheap (several hundred €/$, per year) and after all SST LFNAlias is freeware.
•	In most cases, adding our certificate to the list of trusted certificates is not a necessity, it's an option, which simplifies the installation of our products.
•	Removing our certificate from the certificate store to which it was added is even easier than importing it. And, we recommend doing so, should it no longer be required.

Step 1

Open the Context Menu in Windows Explorer, by clicking on the SST Setup Launcher's icon with the right mouse button.

The extra large, SST Setup Launcher icon, as displayed in Windows Explorer under Windows 10.
Fig. 2.1.1.2.2.1.0.1250

Step 2

In the Context Menu opened in Step 1 and shown in Fig. 2.1.1.2.2.1.0.1251, select and click on the Properties Menu Item (typically at the very bottom of the menu).

The Windows 10 Properties Menu.
Fig. 2.1.1.2.2.1.0.1251

Step 3

The Properties Dialog, opened by clicking on the Properies Menu Item in Step 2, contains several pages, accessible by means of the tabs at the top of the dialog. It should also contain a page which gives the name (or names) of the signatory (or signatories) of the file.

The Properties Dialog containing the file and other properties of the SST Setup Launcher for the LFNAlias Version 1.0 setup package.
Fig. 2.1.1.2.2.1.0.1252

Step 4

To open the page containing the name of the signatory, click/select the "Digital Signature" tab. If the Properties Dialog does not contain a "Digital Signature" tab, we highly recommend to cancel the installation immediately. Furthermore, executing the remaining steps as described is not possible if the file lacks a digital signature.

The Properties Dialog containing the file and other properties of the SST Setup Launcher, with the mouse pointer over the tab that will open the Digital Signatures page.
Fig. 2.1.1.2.2.1.0.1253

Step 5

In order to view the full name of the signatory (or signatories) on the Digital Signature page, expand the header of the Signature List by moving the pointer over the first, vertical, separating line and a click of the left mouse button, as shown in Fig. 2.1.1.2.2.1.0.1254. Note, that typically the cursor will change from an arrow to a vertical line with arrows pointing left and right, once over the right spot in the header.

Signature List on the Digital Signature page of the Properties Dialog, showing only a part of a signer's name.
Fig. 2.1.1.2.2.1.0.1254

Step 6

For the software published by us this should read "SARL Stoelzel Software Technologie". If it does not, discontinue importing the certificate.

Digital Signature page of the Properties Dialog, with the fully visible name of the signatory.
Fig. 2.1.1.2.2.1.0.1255

Step 7

The next step is to open the dialog, on which more detailed signature information is displayed. This can be done by clicking on the Details Button on the Digital Signature page of the Properties Dialog, after having selected a signatory's name in the Signature List, and pressing/clicking the Details Button below it (see Fig. 2.1.1.2.2.1.0.1256).

The Signature List and Details Button on the Digital Signature page of the Properties Dialog after having selected a signatory.
Fig. 2.1.1.2.2.1.0.1256

Step 8

On the default/main page of the Digital Signature Dialog, opened by selecting/clicking the Details Button in Step 7, click on the View Certificate Button, typically located in the middle of the dialog. This will open the Certificate (Information) Dialog.

The default/main page of the Digital Signature Details Dialog.
Fig. 2.1.1.2.2.1.0.1257

Step 9

The Certificate (Information) Dialog, opened in Step 8 (and shown in Fig. 2.1.1.2.2.1.0.1258, immediately below) provides comprehensive information on the certificate, particularly on its Details Page, which you should open by selecting/clicking the tab with the corresponding caption.

The default/main page of the Certificate (Information) Dialog, informing you that the root certification authority (CA) is currently not trusted on your computer and/or user account.
Fig. 2.1.1.2.2.1.0.1258

Step 10

Compare the information on this page to the information published by us on the prdouct's Download Details Page.

The Details Page of the Certificate (Infomation) Dialog.
Fig. 2.1.1.2.2.1.0.1259

Step 11

Although we recommend comparing the entire certificate information on the Details Page of the Certificate (Infomation) Dialog to that published by us on the Internet, the most important is the thumbprint. Unless you are willing to risk becoming the victim of a cyber crime, you should always compare at least this. It can be viewed separately by selecting the "Properties Only" item from the drop-down list at the top of the page.

The Details Page of the Certificate (Infomation) Dialog, showing only the certificate's thumbprint.
Fig. 2.1.1.2.2.1.0.1260

Step 12

To open the Windows wizard, which will add the certificate, with which our setup package and its contents were signed, to your list of trusted certificates, return to the default/main page of the Certificate (Information) Dialog and click on its "Install Certificate ..." Button (see Fig. 2.1.1.2.2.1.0.1258, above).

Once the Welcome to the Certificate Import Wizard Dialog is displayed, you need to decide whether to import our certificate for all users on your computer or the user account under which you are performing the procedure described on this page. If you intend to install the application under more than one user acccount, you can establish trust for our certificate under all user accounts by selecting/checking the Local Machine Radio Button. Otherwise, you can continue with only the Curent User Radio Button selected/checked.

The Welcome to the Certificate Import Wizard Dialog of Windows 10
Fig. 2.1.1.2.2.1.0.1261

Step 13

After having clicked the Next Button in Step 12, the Certificate Import Wizard will display a dialog on which you can choose/select the certificate store into which our certificate should be imported. In this dialog it is necessary to make changes to the default selections/settings shown in Fig. 2.1.1.2.2.1.0.1262.

The Windows 10, Certificate Import Wizard dialog on which you can choose into which certificate store to import the SST code signature certificate(s).
Fig. 2.1.1.2.2.1.0.1262

Step 14

Per default, the Certificate Import Wizard would add our certificate to a certificate store, to which trusted, code signing certificates are normally added. This is why the upper, the "Automatically select the certificate store based on the type of certificate" radio button is checked. However, in the case of our self-signed certificate it is necessary to add the certificate to the list in the trusted root certificates store, and this necessitates selecting the certificate store manually. This is achieved by selecting/checking the lower, the "Place all certificates in the following store" radio button and subsequently clicking on the dialog's Browse Button.

The Windows 10, Certificate Import Wizard dialog on which you can choose into which certificate store to import the SST code signature certificate(s), with the radio button that enables selecting the certificate store checked.
Fig. 2.1.1.2.2.1.0.1263

Step 15

In the Select Certificate Store Dialog, scroll to and select the item that represents the Trusted Root Certification Authorities store and close the dialog by clicking on its OK Button.

The Select Certificate Store Dialog with the item representing the Trusted Root Certification Authorities store selected.
Fig. 2.1.1.2.2.1.0.1264

Step 16

Closing the Select Certificate Store Dialog by means of its OK Button automatically inserts the name of certificate store into which our certificate will be impoerted in the edit control. You can now continue with importing the certificate, by clicking on the dialog's Next Button.

The Windows 10, Certificate Import Wizard dialog on which you can choose into which certificate store to import the SST code signature certificate(s), with the edit control now containing the Trusted Root Certification Authorities as the certificate store into which to import the certificate.
Fig. 2.1.1.2.2.1.0.1265

Step 17

The Completing Certificate Import Wizard Dialog gives you the opportunity to review the made selection. Verify that the certificate will be added to the Trusted Root Certification Authorities store and click the Finish Button

Completing Certificate Import Wizard Dialog.
Fig. 2.1.1.2.2.1.0.1266

Step 18

The last and final step merely involves reading the warning and either cancelling or confirming that you would like our code signing certificate to be added to your Trusted Root Certification Authorities store.

The Security Warning Dialog of Windows 10, warning of adding the SST code signature certificate to the Trusted Root Authorities store.
Fig. 2.1.1.2.2.1.0.1267

Topic Hierarchy: LFNAlias • Support • User Guide • Table of Contents • How to Import the SST Code Signing Certificate