VBA signing Office 2K & XP VBA Macros

Signing Microsoft Office 2K & XP VBA Macros with a Comodo Code-Signing Certificate.

Must have these:

* Microsoft’s tool to import PVK files:

Download the PVK import tool from Microsoft (pvkimprt.exe)

* Your code signing certificate from Comodo (as PVK and SPC files).
If you do not have these files. Follow these directions here

Procedure:

1. Install pvkimport you downloaded from Microsoft. Remember the paths to where you
installed it (c:\codesign\). You may also copy your certificate/key files to this directory
(mycert.spc & mykey.pvk).
2. Open a command-prompt and change to the folder where you installed pvkimport.
(c:\codesign\).
3. Combine your SPC and PVK certificate/key files that you received from Comodo into a
PFX file using pvkimport: (c:\codesign> pvkimprt -import –pfx c:\codesign\mycert.spc
c:\codesign\mycert.pvk)
This will start a wizard. Choose options:
Yes, Export the Private Key (check)
Include all Certificates in Path if possible (check)
Enable strong protection (uncheck)
Delete the private key if export is successful (uncheck)
Enter a password
Choose a location (c:\firefoxext\mycert.pfx)
Finish.
4. You can check the private key has been imported successfully by using MMC. Open MMC,
select add/remove snap in and select certificates. Opening your code signing certificate
should show code signing usage and that you have the private key.
5. Within your Office 2K document, open the Visual Basic editor from the Tools – Macro
menu.
6. Open the VBA project you wish to sign, and select Digital Signature from the Tools menu.
7. Select Chose from the Digital Signature window and your code signing certificate that you
wish to use to sign your VBA macro.
8. Click OK followed by Save, close to return to your Office document. Your macro is now
digitally signed.

Please note to add a friendly name to the certificate before using the certificate. How can this be changed?

Friendly name within the MMC snap in window.

Click the Start Button then select Run and type mmc Click File and select Add/Remove Snap in Select Add,
select Certificates from the Add Standalone Snap-in box and click Add Select Computer Account and click
Finish (note: This step is very important. It must be the computer account and not the current user account)
Close the Add Standalone Snap-in box, click OK in the Add/Remove Snap in Return to the MMC To modify
the friendly name go to the Personal, certificates Select the code sign cert and right click Properties

You should now see the friendly name field which can be modified to suit your needs.