Code signing certificates have become so expensive...

[Vincent Parrett 762]

I had a terrible experience with Certum - I bought a sim and card reader from them for testing Signotaur - however I didn't purchase a certificate - I can test with self signed certificates - however they refused to provide the pin to the card because I didn't purchase a certificate - rendering it completely useless. I do not recommend them at all. 

[Vincent Parrett 762]

9 hours ago, Anders Melander said:

But how do they then get the certificate onto my token if I already have a token?

@Angus Robertson answered that question - using a certificate signing request - like we used to do for SSL certs before LetsEncrypt came along. Whether it is the same certificate (ie with the same thumbprint) or not I am unsure.

 

[Patrick PREMARTIN 80]

9 hours ago, Vincent Parrett said:

I had a terrible experience with Certum - I bought a sim and card reader from them for testing Signotaur - however I didn't purchase a certificate - I can test with self signed certificates - however they refused to provide the pin to the card because I didn't purchase a certificate - rendering it completely useless. I do not recommend them at all. 

Strange, the SIM I received didn't have a PIN, I had to set one with their software.

[Vincent Parrett 762]

2 hours ago, Patrick PREMARTIN said:

Strange, the SIM I received didn't have a PIN, I had to set one with their software.

Mine didn't have a pin, but when I try to set a pin it asks for the PUK - which I do not have and they will not provide. Each email to their support results in 2 emails - an auto responder and a canned response telling me to login to my account - all pointless since there are no certs in my account and no puk available. Wasted $200 for nothing.

[DelphiUdIT 187]

2 hours ago, Patrick PREMARTIN said:

Strange, the SIM I received didn't have a PIN, I had to set one with their software.

But this means that you can use the sim without PIN ? Of course, not maximun security, but certainly a minimal annoyance.

 

I'll have the "kit" this evening and tomorrow I'll see the various options for playing with it.

Edited 23 hours ago by DelphiUdIT

[Patrick PREMARTIN 80]

33 minutes ago, DelphiUdIT said:

But this means that you can use the sim without PIN ? Of course, not maximun security, but certainly a minimal annoyance.

I don't know for the SIM itself, but the software need one and ask for it before doing anything with a certificate

[DelphiUdIT 187]

17 hours ago, Vincent Parrett said:

I had a terrible experience with Certum - I bought a sim and card reader from them for testing Signotaur - however I didn't purchase a certificate - I can test with self signed certificates - however they refused to provide the pin to the card because I didn't purchase a certificate - rendering it completely useless. I do not recommend them at all. 

This is a link for software to initialize the sim card: https://support.certum.eu/en/cert-offer-card-manager/

 

According to this:

 

I will do it now with my new set ...

 

EDIT: I can confirm that the sim card can be initialize with the software (link provided above) and you can SET your free fantasy PIN and PUK.

Edited 18 hours ago by DelphiUdIT