Code signing certificates have become so expensive...

[Vincent Parrett 762]

I had a terrible experience with Certum - I bought a sim and card reader from them for testing Signotaur - however I didn't purchase a certificate - I can test with self signed certificates - however they refused to provide the pin to the card because I didn't purchase a certificate - rendering it completely useless. I do not recommend them at all. 

[Vincent Parrett 762]

9 hours ago, Anders Melander said:

But how do they then get the certificate onto my token if I already have a token?

@Angus Robertson answered that question - using a certificate signing request - like we used to do for SSL certs before LetsEncrypt came along. Whether it is the same certificate (ie with the same thumbprint) or not I am unsure.

 

[Patrick PREMARTIN 80]

9 hours ago, Vincent Parrett said:

I had a terrible experience with Certum - I bought a sim and card reader from them for testing Signotaur - however I didn't purchase a certificate - I can test with self signed certificates - however they refused to provide the pin to the card because I didn't purchase a certificate - rendering it completely useless. I do not recommend them at all. 

Strange, the SIM I received didn't have a PIN, I had to set one with their software.

[Vincent Parrett 762]

2 hours ago, Patrick PREMARTIN said:

Strange, the SIM I received didn't have a PIN, I had to set one with their software.

Mine didn't have a pin, but when I try to set a pin it asks for the PUK - which I do not have and they will not provide. Each email to their support results in 2 emails - an auto responder and a canned response telling me to login to my account - all pointless since there are no certs in my account and no puk available. Wasted $200 for nothing.

[DelphiUdIT 187]

2 hours ago, Patrick PREMARTIN said:

Strange, the SIM I received didn't have a PIN, I had to set one with their software.

But this means that you can use the sim without PIN ? Of course, not maximun security, but certainly a minimal annoyance.

 

I'll have the "kit" this evening and tomorrow I'll see the various options for playing with it.

Edited Thursday at 09:10 AM by DelphiUdIT

[Patrick PREMARTIN 80]

33 minutes ago, DelphiUdIT said:

But this means that you can use the sim without PIN ? Of course, not maximun security, but certainly a minimal annoyance.

I don't know for the SIM itself, but the software need one and ask for it before doing anything with a certificate

[DelphiUdIT 187]

17 hours ago, Vincent Parrett said:

I had a terrible experience with Certum - I bought a sim and card reader from them for testing Signotaur - however I didn't purchase a certificate - I can test with self signed certificates - however they refused to provide the pin to the card because I didn't purchase a certificate - rendering it completely useless. I do not recommend them at all. 

This is a link for software to initialize the sim card: https://support.certum.eu/en/cert-offer-card-manager/

 

According to this:

 

I will do it now with my new set ...

 

EDIT: I can confirm that the sim card can be initialize with the software (link provided above) and you can SET your free fantasy PIN and PUK.

Edited Thursday at 02:01 PM by DelphiUdIT