certificate expired - vba macros now disabled - 50 documents...



Peter R.
07-09-2005, 11:52 PM
Hi Newsgroup,

we´ve signed a vba macro in a excel template. Based on theses templates 50
of our users created their own documents.

Now the certificate is expired and the macro only works when we set the
security to medium and manually accept the macros.

Is there another solution than resign the template and tell the users to
make new documents to get the macro-message away?


Best regards from germany,

Peter

Eduard Koller [MSFT]
07-09-2005, 11:52 PM
What certificate expired? Did you try to renew the certificate?

--
Eduard Koller[MS]

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


"Peter R." <I-dont-want-to-have-emails@EZ2Explain.com> wrote in message
news:%23tEqFGHYFHA.616@TK2MSFTNGP12.phx.gbl...
> Hi Newsgroup,
>
> we´ve signed a vba macro in a excel template. Based on theses templates 50
> of our users created their own documents.
>
> Now the certificate is expired and the macro only works when we set the
> security to medium and manually accept the macros.
>
> Is there another solution than resign the template and tell the users to
> make new documents to get the macro-message away?
>
>
> Best regards from germany,
>
> Peter
>

Brian Komar
07-09-2005, 11:52 PM
In article <uSCsWgnYFHA.1404@TK2MSFTNGP09.phx.gbl>,
eduardk@online.microsoft.com says...
> What certificate expired? Did you try to renew the certificate?
>
>
You cannot renew an expired certificate, you have to perform the renewal
before the prior certificate expires. You still can request a new
certificate in the current situation.

You will have to re-sign the VB Macros to get them trusted again. There
is no way to re-enable the trust. The other option would have been to
time-stamp the signatures with a time-stamping server. This would have
made the signature validity determined by the time-stamping service
date.

Brian
--
==
Brian Komar
MVP - Windows - Security
http://www.identit.ca/blogs/brian

Peter R.
07-09-2005, 11:53 PM
Thanks for your answers.

Two questions are still opened for me:

First - Is it possible to use a microsoft ca-server (2003) as an timestamp
server? If not has anybody a list of timestamp servers available?

Second - Is there an easy way to resign multiple files? For expample if I
had 50 copys from one document, is there way to (re-) sign the macro in all
the fifty files, without opening each document, open the visual basic editor
and sign the macro project?

Best regards,

Peter

"Brian Komar" <MVPbkomar@nospam.identit.ca> schrieb im Newsbeitrag
news:MPG.1d02b0f2d525bc119896aa@msnews.microsoft.com...
> In article <uSCsWgnYFHA.1404@TK2MSFTNGP09.phx.gbl>,
> eduardk@online.microsoft.com says...
>> What certificate expired? Did you try to renew the certificate?
>>
>>
> You cannot renew an expired certificate, you have to perform the renewal
> before the prior certificate expires. You still can request a new
> certificate in the current situation.
>
> You will have to re-sign the VB Macros to get them trusted again. There
> is no way to re-enable the trust. The other option would have been to
> time-stamp the signatures with a time-stamping server. This would have
> made the signature validity determined by the time-stamping service
> date.
>
> Brian
> --
> ==
> Brian Komar
> MVP - Windows - Security
> http://www.identit.ca/blogs/brian

Eduard Koller [MSFT]
07-09-2005, 11:53 PM
1. No.
2. You may want to consider scripting through capicom

--
Eduard Koller[MS]

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


"Peter R." <I-dont-want-to-have-emails@EZ2Explain.com> wrote in message
news:%23jQuSlcZFHA.2288@TK2MSFTNGP14.phx.gbl...
>
> Thanks for your answers.
>
> Two questions are still opened for me:
>
> First - Is it possible to use a microsoft ca-server (2003) as an timestamp
> server? If not has anybody a list of timestamp servers available?
>
> Second - Is there an easy way to resign multiple files? For expample if I
> had 50 copys from one document, is there way to (re-) sign the macro in
> all the fifty files, without opening each document, open the visual basic
> editor and sign the macro project?
>
> Best regards,
>
> Peter
>
> "Brian Komar" <MVPbkomar@nospam.identit.ca> schrieb im Newsbeitrag
> news:MPG.1d02b0f2d525bc119896aa@msnews.microsoft.com...
>> In article <uSCsWgnYFHA.1404@TK2MSFTNGP09.phx.gbl>,
>> eduardk@online.microsoft.com says...
>>> What certificate expired? Did you try to renew the certificate?
>>>
>>>
>> You cannot renew an expired certificate, you have to perform the renewal
>> before the prior certificate expires. You still can request a new
>> certificate in the current situation.
>>
>> You will have to re-sign the VB Macros to get them trusted again. There
>> is no way to re-enable the trust. The other option would have been to
>> time-stamp the signatures with a time-stamping server. This would have
>> made the signature validity determined by the time-stamping service
>> date.
>>
>> Brian
>> --
>> ==
>> Brian Komar
>> MVP - Windows - Security
>> http://www.identit.ca/blogs/brian
>
>


certificate expired - vba macros now disabled - 50 documents...