I signed up with Geotrust last year to do M2M code signing, and all was well for
a while. Then just recently, I tried to do another code signing and found that
the Administrative Cert (the one known only by Geotrust) was no longer on my
computer. I was unable to download the Cert again from Geotrust until I had
contacted them and explained my situation. Then then enabled another download
for me. I must have done a system restore at some point and accidentally gotten
rid of that Geotrust Cert. But that got me thinking, why not back up the Cert?
Well, I tried, but I found that the Geotrust Administrative Ceritificate is
marked so that the private part of the key is not exportable. But I would need
the private part of the key too in order to re-import that Cert.

Is there any way of protecting against a system crash? Or am I forever at the
mercy of Geotrust to rescue me if I loose my Cert?

Robert Scott
Ypsilanti, Michigan

Re: Backing up Geotrust Code Signing Certs by Scott

Scott
Thu Jul 12 00:31:06 CDT 2007

Making the key unexportable is common for situations like this. I think the
answer to your last question is "yes". (although Geotrust would be the
ultimate source of an answer there)

--
Scott Yost
Software Development Engineer/Test
Microsoft Corp.

This posting is provided "AS IS" with no warranties, and confers no rights.

"Robert Scott" <---@---> wrote in message
news:467820a0.1869296@news.provide.net...
>I signed up with Geotrust last year to do M2M code signing, and all was
>well for
> a while. Then just recently, I tried to do another code signing and found
> that
> the Administrative Cert (the one known only by Geotrust) was no longer on
> my
> computer. I was unable to download the Cert again from Geotrust until I
> had
> contacted them and explained my situation. Then then enabled another
> download
> for me. I must have done a system restore at some point and accidentally
> gotten
> rid of that Geotrust Cert. But that got me thinking, why not back up the
> Cert?
> Well, I tried, but I found that the Geotrust Administrative Ceritificate
> is
> marked so that the private part of the key is not exportable. But I would
> need
> the private part of the key too in order to re-import that Cert.
>
> Is there any way of protecting against a system crash? Or am I forever at
> the
> mercy of Geotrust to rescue me if I loose my Cert?
>
> Robert Scott
> Ypsilanti, Michigan