UAC Patching and Digital Signatures

Question

We have an application that performs automatic updates. Until recently, we did not encounter any problems. However, many of our customers are finally switching to Windows 7 and are faced with all the problems.

I was instructed to update the installer to work on 7 (and Vista, although it seems that none of our clients use Vista).

Based on this article, it seems that the standard user can apply the msp patch provided that it is signed with the same signature as the original install.

Does anyone have any experience? Is the signature signed by a third party? I ask because I followed this process and created my development signatures, and when I installed Windows 7 in a separate window, it showed Unknown Publisher and asked the administrator for login. I assumed that it was because it was self-signed. However, I want to check before we spend money on obtaining a third-party certificate from Thawte or Verisign.

Answer 1

I think I solved my problem.

I took the certificates that I created on my test field and manually imported them into my W7 test box.

, .

, , Thawte Verisign.