InfoPath Dev

What is the different between giving a form FullTrust security (and create MSI file for installtion) and Sign the form by certificate??

Hi,

Giving a form Full trust would require you to register the form on the user's machine. I assume you would do the registration in your installation package.

When digitally signing a form, the form does not need to be registered on each user's machine.

Hope this helps
Scott

O.K Scott!
I'm very close to solve this problem. I need from you just littel more information.
I know for sure that I must to give my form full trust security level. I want to install the form (= create template of it) on my organization server! in that way that the users will open (by button click) an instance of the form from a web portal page of the organization!!
by this code

var ranNum= Math.round(Math.random()*25555);
var Newpath="\\\\OrgServer\\Templates\\"+ ranNum +".xml"
var template="\\\\OrgServer\\Templates\\MyForm.xsn"

//Start the application
var oApp = new ActiveXObject("InfoPath.Application");
var oXDocumentCollection = oApp.XDocuments;
var oXDocument=oXDocumentCollection.NewFromSolution(template);

I only need "Yes" "No" answer! Can I satisfied in install the form only in the organization server (called "OrgServer") or should I install it in each machin in the organization for addition??
that's all!!!

thank you for your help

Hi,

If you can digitally sign the form, then installing it on the server alone will work and no client machine installations will be required.

If you cannot digitally sign the form, then you will have to install the template and register it on every client machine in the organisation.

Personally, i go for the digitally signing of forms.

hope this helps.
Scott

Thank you Scott!
I was watting long time for answer to this problem! and you finally helped me.
Just 2 more question - Let's say that i will digitally signing my form:
1) Do I need to buy certificate for this?
2) After I digitally sign the form: should I create a MSI file and install it on the server or Should I only publish it to the server? What's the different?

Hi,

You are more than welcome. In answer to your questions;

1. we use http://www.thawte.com/ to supply our digital certificates. IIRC, Microsoft servers can generate certificates, but i would have no idea how to do this.

2. TBH you can do either. we publish the form to the server. If you want to create an MSI because you have other processes to complete too, then that is fine. THere is no difference, just depends on what you make the MSI do :)

Cheers, Scott.

O.K!
My code is wirriten in C# (the form is VS .NET project).this project contain WebReference (To a Web Service on the server). So do I need MSI file for installation or still I can do either??
Thank you! you help a lot

Hi.

You can still do either.

What ever method you adopt, do remember ensuring the webreference url in the manifefst is a fully qualified path :)

Cheers, Scott

Should I install the certificate on the server only or in each machin?
Is it any test certificate that I can use on my server for check if user in my organiztion will be able to open the form?

Hi.

You will not need to install the certificates on the server. The certificates will be bundled within your XSN. When the user tries to open the digitally signed form for the first time, they will be prompted to accept the certificates. Accepting this will save the certificates in the users profile. You do not need to install anything on the client machines.

In regards to test certificates, i cannot help as my establishment already had purchased certificates. However, a quick google search showed - http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx this should help you set up Microsoft server certificates.

Cheers, Scott

I understand!

Now I want you to tell why it will not work I only puplish it (or install) the form on the server without giving full trust security and without sign digital??
Is it because the form's code have WebReference to a WebService??
Thank you!

And one more thing..... What should I do for see the certificate on the list of "select certificate" in the Form option->Security->sign this form????

Hi.

It does not work because your code behind requires the full trust access / digitally signed security level.

To see a list of certificates - Form Options, Security, Select Certificate.

Cheers, Scott

Whitch Type of certificate should I use? Is it any certificate of microsoft which i can try with?

Hi. Like i said, we only use Thwate certificates. Have you tried researching Microsoft Server and digital certificates. Sorry. Scott.