InfoPath Dev

Hi all,
the digital certificate to sign a templete must be a "Signing Code Certificate" type and have the value "Signature" or "both" for attribute "Key Usage". Is this correct? Are these the only features requested by Infopath? Does someone know something about MS Certificate Service?


Thank u!

Hi Tatopitta,

I have experience setting up the Certification Authority. On your domain server, go to mmc and add-in the Certification Authority Service. There's some setup required, but this should work. Then, the clients in your domain should be able to request new certificates for use in signing forms.

I'm not sure I understood your question completely. Can you be more specific?


Patrick Halstead [InfoPath MVP]
InfoPathDev

Hi Patrick!
I need a digital certificate to sign the templete I've designed becouse the templete needs to be full trusted. I'd like to know the features that the certificate must have.
In addition, I have another problem becouse of my company's CA: the web procedure (certsrv) to request the certificate doesn't ask me the type of the certificate and doesn't let me set the correct value for the attribute Key Usage which is disabled and set to Exchange.
So this topic is about two questions :)

Hi again,

Why do you need full trust? Why not use the regform tool (with /T) to install it full trust on your clients via the MSI? We've deployed several Full Trust solutions, but it's a lot of work and the user has to end up installing your certificate anyway. The digicert Full Trust option is really only required for Full Trust forms running on a website. Is that your scenario? Why do you need the full trust feaure?

I think you just want a code-signing certificate. I know Verisign sells these and they charge ~$499 for them.

Hope this helps,

Patrick Halstead [InfoPath MVP]
InfoPathDev

Thank you for your advice Patrick!
I need full trust templete becouse it must create and save on computer's user a CSV file built on the XML fields. Anyway, in my scenario in the future we'd like to integrate Infopath with Biztalk so that Biztalk will send infopath modules to the client by email adding some information in the XML code. With this idea in our mind I think the digital certificate is a better solution, isn't it?

Hi Tatopitta,

Well, it depends. I think that digital certificates are good assuming you want to buy them and send them to people. For some people that's expensive. I think for intranet, it's also not an IT policy to install certificates unless they are issued from the company, but I totally agree that digital certificates are the future.

For now, to simplify your life, if you do not need "auto-upgrade" support - in other words, if you don't need to have the users automatically upgrade the form when it changes - then why not use the regform tool and ship down MSIs to the client. That doesn't require a digicert.

But, why save a CSV file locally? Why not submit as an attachment to a website and e-mail them a link? That doesn't require full trust. I think the times when you really truly need Full Trust are few and far between. You're better off with domain trust.

Ciao!

Patrick Halstead [InfoPath MVP]
InfoPathDev

Hi Patrick, thank u for your attention.
In the future I'll need to add some information to XML document that Biztalk sends to the users...so I suppose that it's simpler if I use the certificate (got by the company's CA and not bought); using MSI, is it possibile to do this?
the CSV file must be created locally by some users becouse it is used locally only by some users :)

Ciao :)

Hi Tatopitta,
I don't think it really matters if you use the URN or URL based Full Trust. RegForm implicitly supports URN based. The DigiCert supports URL. BizTalk will work with either. You need to install the pipeline adapter for BizTalk to preserve taskIDs in the PI for the XML forms that you are streaming through BizTalk - see the MSDN lab for info on that.

Where are you in Italy?

Patrick Halstead [InfoPath MVP]
InfoPathDev

Hi Patrick! Thank you for your advices. I'm in Bergamo, near Milan :))) Have you ever been here? Do you prefer VBScript or JavaScript to write code?I'm going to tel to Microsoft support to solve my problem with digital certificate...

Hi Tatopitta,
Please post the comments from MS support here. We're dying to hear your resolution. If they can't do it (my guess...), let me know, and I'll ping the InfoPath team directly... Wow! You live in Bergamo. That must be one of the best places in the World to live. I have wanted to travel to Milan for many years now and eyed Bergamo as a great side trip. What kind of InfoPath forms are you developing in Bergamo?

Patrick Halstead [InfoPath MVP]
InfoPathDev

Hi Patrick!
So you know very well my places...the next time you'll be here,I'll be your travel guide :)
Today there's our consultant so I hope I can get the correct certificate to sign the templete :)
The form I'm designing is about tracking activities for our employees who travel a lot and CSV file is required to process this kind of data. I'll make you know the solution :)
Thank u!

Tatopitta

Hi again Tatopitta!
Watch out or I may just show up on your desktop with visa in hand. :) Anyway, why is CSV a requirement? Why not use a database? Is it because of the offline requirement and integration with existing apps?

Patrick Halstead [InfoPath MVP]
InfoPathDev

Hi :)))
CSV is a requirement to integrate with existing applications...so I must create this kind of file :)

Still no solution for my problem with ms certificate service :(

Hi again,
We have been using Certificate Authority (CA) here. I am using a User certificate for my stuff and it works fine. Can you try going tohttp://www.companyname.com/certsrv/ or the internal site where your CA is installed and requesting a User type of certificate?

Patrick Halstead [InfoPath MVP]
InfoPathDev

Hi,
I've tried to request a user certificate to my company's CA http://www.mycompany.com/certsrv), but I can't change the value for the attribute "Key Usage" which is set "Exchange" while Infopath requires "Both" or "Signature"...so Infopath doesn't see my certificate! :)