General

Re: digital certificate

tatopitta — Thu, 28 Jul 2005 08:11:45 GMT

I think so too! :)

Re: digital certificate

Patrick Halstead — Thu, 28 Jul 2005 07:08:33 GMT

Heya!
Sounds like a CA config issue. We just setup CA here and it's working beautifully!

Patrick Halstead [InfoPath MVP]
InfoPathDev

Re: digital certificate

tatopitta — Thu, 28 Jul 2005 06:05:37 GMT

Hi,
I've tried to request a user certificate to my company's CA http://www.mycompany.com/certsrv), but I can't change the value for the attribute "Key Usage" which is set "Exchange" while Infopath requires "Both" or "Signature"...so Infopath doesn't see my certificate! :)

Re: digital certificate

Patrick Halstead — Wed, 27 Jul 2005 20:46:12 GMT

Hi again,
We have been using Certificate Authority (CA) here. I am using a User certificate for my stuff and it works fine. Can you try going tohttp://www.companyname.com/certsrv/ or the internal site where your CA is installed and requesting a User type of certificate?

Patrick Halstead [InfoPath MVP]
InfoPathDev

Re: digital certificate

tatopitta — Wed, 27 Jul 2005 06:09:08 GMT

Hi :)))
CSV is a requirement to integrate with existing applications...so I must create this kind of file :)

Still no solution for my problem with ms certificate service :(

Re: digital certificate

Patrick Halstead — Wed, 27 Jul 2005 05:11:11 GMT

Hi again Tatopitta!
Watch out or I may just show up on your desktop with visa in hand. :) Anyway, why is CSV a requirement? Why not use a database? Is it because of the offline requirement and integration with existing apps?

Patrick Halstead [InfoPath MVP]
InfoPathDev

Re: digital certificate

tatopitta — Tue, 26 Jul 2005 07:29:59 GMT

Hi Patrick!
So you know very well my places...the next time you'll be here,I'll be your travel guide :)
Today there's our consultant so I hope I can get the correct certificate to sign the templete :)
The form I'm designing is about tracking activities for our employees who travel a lot and CSV file is required to process this kind of data. I'll make you know the solution :)
Thank u!

Tatopitta

Re: digital certificate

Patrick Halstead — Tue, 26 Jul 2005 06:25:24 GMT

Hi Tatopitta,
Please post the comments from MS support here. We're dying to hear your resolution. If they can't do it (my guess...), let me know, and I'll ping the InfoPath team directly... Wow! You live in Bergamo. That must be one of the best places in the World to live. I have wanted to travel to Milan for many years now and eyed Bergamo as a great side trip. What kind of InfoPath forms are you developing in Bergamo?

Patrick Halstead [InfoPath MVP]
InfoPathDev

Re: digital certificate

tatopitta — Mon, 25 Jul 2005 08:18:33 GMT

Hi Patrick! Thank you for your advices. I'm in Bergamo, near Milan :))) Have you ever been here? Do you prefer VBScript or JavaScript to write code?I'm going to tel to Microsoft support to solve my problem with digital certificate...

Re: digital certificate

Patrick Halstead — Sat, 23 Jul 2005 01:00:24 GMT

Hi Tatopitta,
I don't think it really matters if you use the URN or URL based Full Trust. RegForm implicitly supports URN based. The DigiCert supports URL. BizTalk will work with either. You need to install the pipeline adapter for BizTalk to preserve taskIDs in the PI for the XML forms that you are streaming through BizTalk - see the MSDN lab for info on that.

Where are you in Italy?

Patrick Halstead [InfoPath MVP]
InfoPathDev

Re: digital certificate

tatopitta — Fri, 22 Jul 2005 06:51:28 GMT

Hi Patrick, thank u for your attention.
In the future I'll need to add some information to XML document that Biztalk sends to the users...so I suppose that it's simpler if I use the certificate (got by the company's CA and not bought); using MSI, is it possibile to do this?
the CSV file must be created locally by some users becouse it is used locally only by some users :)

Ciao :)

Re: digital certificate

Patrick Halstead — Fri, 22 Jul 2005 06:42:11 GMT

Hi Tatopitta,

Well, it depends. I think that digital certificates are good assuming you want to buy them and send them to people. For some people that's expensive. I think for intranet, it's also not an IT policy to install certificates unless they are issued from the company, but I totally agree that digital certificates are the future.

For now, to simplify your life, if you do not need "auto-upgrade" support - in other words, if you don't need to have the users automatically upgrade the form when it changes - then why not use the regform tool and ship down MSIs to the client. That doesn't require a digicert.

But, why save a CSV file locally? Why not submit as an attachment to a website and e-mail them a link? That doesn't require full trust. I think the times when you really truly need Full Trust are few and far between. You're better off with domain trust.

Ciao!

Patrick Halstead [InfoPath MVP]
InfoPathDev

Re: digital certificate

tatopitta — Fri, 22 Jul 2005 06:17:34 GMT

Thank you for your advice Patrick!
I need full trust templete becouse it must create and save on computer's user a CSV file built on the XML fields. Anyway, in my scenario in the future we'd like to integrate Infopath with Biztalk so that Biztalk will send infopath modules to the client by email adding some information in the XML code. With this idea in our mind I think the digital certificate is a better solution, isn't it?

Re: digital certificate

Patrick Halstead — Fri, 22 Jul 2005 01:50:02 GMT

Hi again,

Why do you need full trust? Why not use the regform tool (with /T) to install it full trust on your clients via the MSI? We've deployed several Full Trust solutions, but it's a lot of work and the user has to end up installing your certificate anyway. The digicert Full Trust option is really only required for Full Trust forms running on a website. Is that your scenario? Why do you need the full trust feaure?

I think you just want a code-signing certificate. I know Verisign sells these and they charge ~$499 for them.

Hope this helps,

Patrick Halstead [InfoPath MVP]
InfoPathDev

Re: digital certificate

tatopitta — Thu, 21 Jul 2005 07:31:14 GMT

Hi Patrick!
I need a digital certificate to sign the templete I've designed becouse the templete needs to be full trusted. I'd like to know the features that the certificate must have.
In addition, I have another problem becouse of my company's CA: the web procedure (certsrv) to request the certificate doesn't ask me the type of the certificate and doesn't let me set the correct value for the attribute Key Usage which is disabled and set to Exchange.
So this topic is about two questions :)