Knowledge Base

To sign code with a Code Signing Certificate for Microsoft Office and VBA, perform the following steps below:

1. Open the document or template that contains the macros you want to sign
2. Open Visual Basic Editor
3. Select the VBA project you want to sign in the Project Explorer
4. Click Tools > Digital Signature > Choose > Choose a Digital ID > OK
   
   If you cannot find the certificate you are looking for and your certificate provisioning methods are either a SafeNet token or DigiCert KeyLocker, ensure that your certificate has been installed and configured correctly. Please see the following guides to install and configure your certificate based on your provisioning method:
   
   
   • Set up your DigiCert provided etoken
   • DigiCert KeyLocker
      
5. Save your file
    

Note: DigiCert recommends timestamping all code with the Microsoft Office and VBA Signing Digital ID. As long as the code is not altered, this will ensure the code will continue to run after the certificate's expiration date. To learn more about Timestamp VBA projects, refer to this article.

Important: DigiCert recommends customers must leverage the SHA256 Timestamping service going forward, and should not use a SHA1 service unless there is a legacy platform constraint that doesn’t allow the use of the SHA2 service.

The timestamping URL is: http://timestamp.digicert.com

Note: Microsoft tools VBA, MAGE do not currently support RFC 3161 protocols. DigiCert does offer RFC 3161 Timestamp services that can be used when support becomes available for RFC 3161.