Join our affiliate network and become a local SSL expert

♦ learn more about our program ♦
picture of tbs certificates
picture of tbs certificates
Our products range

Request a Microsoft Authenticode or VB (multiple-platforms) certificate

To request a Microsoft Developer Certificate, you can use our Keybot tool to generate a private key and CSR automatically during the ordering process. Here is a link on how Keybot works: Generate a CSR for a developer/client certificate with our KEYBOT tool

How to choose a Code Signing certificate for Microsoft Authenticode:

  • To sign an application, an executable, or a 32 or 64 bit windows library (.EXE/.MSI/.DLL), you need a Sectigo, DigiCert or Globalsign developer certificate : see our comparative table below in "Prices and online ordering".

  • If you want to sign Windows drivers, you must use DigiCert or Globalsign. It is also the latter that you must choose for signing for Windows RT.

  • If you want to maximize your Smartscreen, as soon as you deploy your certificate, we also recommend the Globalsign EV Developer Certificate.

  • Prices and order form

Once your certificate delivered:
In order not to worry about expiration, you have to make a signature with timestamp (see timestamping in the Microsoft documentation).

Windows 10 an Microsoft Edge case

Microsoft Edge is not compatible with the Cert Enroll or the Keygen tag. It is therefore mandatory to use Internet Explorer under Windows. Under Windows 10, the default version is Internet Explorer 11. A download page is also available.

CSR manual generation

If you were not able to automatically generate your CSR with Internet Explorer at the time of application and need to provide a CSR, you can use our tool (documentation) to generate it with Internet Explorer.

For cases where you do not have access to Internet Explorer, you can also generate private keys and CSRs using Windows tools:

ATTENTION: the information below is now obsolete following the end of the support of "certEnroll" in our order form.

With Internet Explorer 5.5 to 6 (or 7 under XP):

Using the certificate request form, your browser will generate the private key as a file.pvk.When you install the certificate, you will get the file .spc file.

Note the path to the .pvk that you choose on the order form.

With Internet Explorer 7 to 11 (Starting from Windows Vista/Windows Server 2008)

Using the certificate request form, your browser will generate a private key in the registry (certificate database). There is no more .pvk. When you install the certificate, it will be installed in the registry (visible via the MMC). There will be no more.spc file anymore.

Useful links