Home/ Questions/Q 7941121
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-03T23:34:20+00:00

I have an application that will initially be downloaded and installed by the user.

  • 0

I have an application that will initially be downloaded and installed by the user.
To update the application the application itself will

  1. Check if a new version exists
  2. If so download the new version (A setup.exe file created by installshield le bundled with vs2010)
  3. Application then starts a new System.Diagnostics.Process to install the new software (Currently running software is shutdown, uninstalled and new version installed by Installshield)

I want to be able to be sure that the exe is trusted to protect against any webservice hack.
What is the best way to achieve this? I need the verification to happen within my c# .net wpf application.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You need to buy an authenticode code signing certificate from a trusted authority (we used godaddy, but there’s loads of others out there), and use it to sign all executables in your installer (as a post-build task with signtool.exe)(see here for details) and the installshield generated installer when you build your setup package.

    When your update process downloads the new installer package, you might choose to check that the signature is trusted at that point prior to deploying it.

    • 0