11/11/2008

To publish updates, make sure that the system, not only the user, trusts the signature on the .cab files. If you run Mobile Device Manager (MDM) Software Distribution Console console on a separate computer, follow these steps on both the computer that has the console and the computer that has Windows Server Update Services (WSUS) server.

If you sign a .cab file by using certificate C, issued by a certification authority whose certificate is R, you must put certificate Rin the Trusted Root Certification Authorities store of the local computer and you must put certificate Cin the Trusted Publishers store of the local computer.

To install the root certificate in the Trusted Root Certification Authorities store

  1. Right-click the .cab file that you signed with the CabSignTool utility, and then choose Properties.

  2. In the < file name >.cab Propertiesdialog box, on the Digital Signaturestab, select the appropriate signature, and then choose Details.

  3. In the Digital Signature Detailsdialog box, on the Generaltab, choose View Certificate.

  4. In the Certificatedialog box, on the Generaltab, choose Install Certificate.

  5. On the Welcome to the Certificate Import Wizardpage, choose Next.

  6. On the Certificate Storepage, select Place all certificates in the following store, and then choose Browse.

  7. In the Select Certificate Storedialog box, select the Show physical storescheck box, select the Trusted Root Certification Authoritiesstore on the local computer, and then choose OK.

  8. On the Certificate Storepage, choose Next.

  9. On the Completing the Certificate Import Wizardpage, choose Finish.

  10. In the Certificate Import Wizarddialog box that informs you that the import was successful, choose OK.

To install the certificate in the Trusted Publishers store

  1. Right-click the .cab file that you signed with the CabSignTool utility, and then choose Properties.

  2. In the < file name >.cab Propertiesdialog box, on the Digital Signaturestab, select the appropriate signature, and then choose Details.

  3. In the Digital Signature Detailsdialog box, on the Generaltab, choose View Certificate.

  4. In the Certificatedialog box, on the Generaltab, choose Install Certificate.

  5. On the Welcome to the Certificate Import Wizardpage, choose Next.

  6. On the Certificate Storepage, select Place all certificates in the following store, and then choose Browse.

  7. In the Select Certificate Storedialog box, check the Show physical storesbox, select the Trusted Publishersstore on the local computer, and then choose OK.

  8. On the Certificate Storepage, choose Next.

  9. On the Completing the Certificate Import Wizardpage, choose Finish.

  10. In the Certificate Import Wizarddialog box that informs you that the import was successful, choose OK.

See Also