![\"picture\"\/](\"https:\/\/blog.mindworkshop.com\/image\/alpha007.gif\")
Software that’s distributed over the Internet is traditionally \u201csigned\u201d using a \u201ccode signing certificate.\u201d A code signing certificate allows an authority ostensibly worthy of trust to vouch for whoever is distributing the software in question.<\/p>\n
At least, that’s how it’s supposed to work.<\/p>\n
In reality, signing distributed software with a code signing certificate doesn’t do a lot beyond suppressing the scary messages that some web browsers and \/ or Windows might display when you download or install software. Absent a signing certificate, you might see a message to the effect that the publisher of the software in question could not be verified. There’s an example below.<\/p>\n
<\/p>\n
Alchemy Mindworks has signed its software with a code signing certificate for the past several decades, as we didn’t want to unsettle users of our products with ominous popups.<\/p>\n
![\"picture\"\/](\"https:\/\/blog.mindworkshop.com\/image\/cs0005.png\")
Code signing certificates were never inexpensive, but in the summer of 2023 they quadrupled in price… for no detectable reason. They also became manifestly more complex to use, both for software developers like us and in some cases for users of software who want to install downloaded products.<\/p>\n
The best that can be said of code signing is that it offers users of signed software a degree of assurance that what they’re installing really came from the publisher who purports to have created it. If you’re downloading Alchemy Mindworks software from the Alchemy Mindworks web site, you can enjoy a substantially greater level of confidence that this is so than a digital certificate would have afforded you.<\/p>\n
Nobody gets to upload software to our servers except for us.<\/p>\n
In the interest of keeping our costs \u2013 and hence our prices \u2013 at their lowest possible levels, we’ve decided to forego commercial code signing certificates going forward. If you download and install our software \u2013 without having read the rest of this posting \u2013 you might see a warning to the effect that the publisher of our software is unknown or couldn’t be verified.<\/p>\n
After a suitable period of head-scratching, we’ve created a simple procedure to disable Windows’ myriad warnings for downloaded Alchemy Mindworks software. We hasten to add that this will in no way compromise Windows’ internal security \u2013 it’s simply a way to reassure Windows that you trust our software without being prompted to confirm that you really, really, really want to install it every time you download something.<\/p>\n
If you’re running Windows 11, please scroll down to the next section.<\/p>\n
To make all this work, you’ll need to download and install the Alchemy Mindworks trusted certificate<\/a> by clicking on the foregoing link. Save the resulting ZIP file to wherever you like to keep your downloads.<\/p>\n Open the ZIP file \u2013 or just double-click on it to open it in File Explorer \u2013 and then extract and double-click on alchemy_dist.cer<\/b>. You might see a prompt window like the one to your right asking you which application you want to open the .cer file in.<\/p>\n Choose the Crypto Shell Extensions<\/b> option and then click on OK. <\/p>\n This window doesn’t always appear, and if you’ve never had cause to get up close and personal with Windows’ certificates, you probably won’t see it.<\/p>\n Windows’ certificates are seriously weird \u2013 if this window is new to you, be smug.<\/p>\n You’ll note that the Certificate window states that \u201cThe CA Root certificate is not trusted.\u201d This is nothing to concern yourself with \u2013 it means that Windows doesn’t know who we are. You presumably do, or you wouldn’t be reading this.<\/p>\n Note that the certificate was issued to Alchemy Mindworks by Alchemy Mindworks. In a commercial code signing certificate, it would have been issued to Alchemy Mindworks by a certificate authority you’ve almost certainly never heard of, but are expected to trust anyway.<\/p>\n Click on Install Certificate.<\/p>\n Click on Next.<\/p>\n The Certificate Import Wizard will present you with a screen to allow you to choose where your new certificate is to be added to Windows’ certificate store. Select Place Certificate in the Following Store<\/b> and click on the Browse button.<\/p>\n A Select Certificate Store window will open \u2013 there’s one illustrated a few paragraphs down. Select the Trusted Root Certificate Authorities<\/b> option, as shown therein, and click on OK. <\/p>\n You’re essentially telling Windows that you trust us. We have very honest faces.<\/p>\n Click on Next to get to the final confirmation screen of the Certificate Import Wizard. Click on Finish to complete the certificate installation into your Windows certificate store. Of course, this being Windows, you’ll probably see one more warning, like the one below. Click on Yes to dismiss it, and you’re done.<\/p>\n With the Alchemy Mindworks trusted certificate installed in your Windows certificate store, you’ll be able to install Alchemy Mindworks software without seeing any scary Windows messages about trusting its publisher… for at least the next ten years. <\/p>\n To remove the Alchemy Mindworks trusted certificate:<\/p>\n The Alchemy Mindworks certificate will be history.<\/p>\n Please scroll down to the closing section of this posting.<\/p>\n Installing a certificate under Windows 11 is substantially easier than it would be under Windows 10, and this version of the instructions for the Alchemy Minworks Trusted Certificate is somewhat shorter as a result.<\/p>\n To make all this work, you\u2019ll need to download and install the Alchemy Mindworks trusted certificate<\/a> by clicking on the foregoing link. Save the resulting ZIP file to wherever you like to keep your downloads.<\/p>\n Open the ZIP file \u2013 or just double-click on it to open it in File Explorer \u2013 and then extract and double-click on alchemy_dist.cer<\/b>. A certificate window like the one to your right will appear. <\/p>\n Windows\u2019 certificates are seriously weird \u2013 if this window is new to you, be smug.<\/p>\n Click on Install Certificate<\/b>.<\/p>\n You\u2019ll be welcomed to the Certificate Import Wizard \u2013 probably without a trumpet fanfare or a complimentary drink, but don\u2019t let this disappoint you. Select the Current User<\/b> option and click on Next<\/p>\n The second page of the certificate import wizard will appear, looking more or less like the one below. <\/p>\n Select Place Certificate in the Following Store<\/b> and click on the Browse button.<\/p>\n You\u2019re essentially telling Windows that you trust us. We have very honest faces.<\/p>\n Your Certificate Import Wizard\u2019s Certificate Store field should now have Trusted Root Certificate Authorities<\/b> as its destination.<\/p>\n Click on Next to get to the final confirmation screen of the Certificate Import Wizard. Click on Finish to complete the certificate installation into your Windows certificate store.<\/p>\n You\u2019ll be told that the installation was successful.<\/p>\n With the Alchemy Mindworks trusted certificate installed in your Windows certificate store, you\u2019ll be able to install Alchemy Mindworks software without seeing any scary Windows messages about trusting its publisher\u2026 for at least the next ten years.<\/p>\n To remove the Alchemy Mindworks trusted certificate:<\/p>\n The Alchemy Mindworks certificate will be history.<\/p>\n We’d like to take this opportunity to thank all the users of Alchemy Mindworks software who’ve undertaken to jump through this additional hoop. It is our sincere hope that the authorities who issue code signing certificates might one day repent of their rapacious pricing and maximally-paranoid security procedures… but we doubt it.<\/p>\n Thanks for trusting us.<\/p>\n Should you have any concerns about our software, the security thereof, any of the details of the procedure explained in this post or the issue of code signing, we invite you to contact us<\/a>. We’ll be pleased to explain this situation in as much detail as you require, and the message you receive will be signed by a living, breathing Alchemy Mindworks staff member \u2013 not a certificate.<\/p>\n![\"picture\"\/](\"https:\/\/blog.mindworkshop.com\/image\/cs0001.png\")
In the interest of completeness and full transparency, the following description of the certificate installation procedure is somewhat verbose and detailed. It will invariably take you longer to read than to complete \u2013 it’s all pretty simple.<\/p>\n![\"picture\"\/](\"https:\/\/blog.mindworkshop.com\/image\/cs0002.png\")
A Windows Certificate window will open, like the one to your right. Once again, this is something you probably won’t have encountered previously if you haven’t had cause to concern yourself with Windows’ certificates.<\/p>\n![\"picture\"\/](\"https:\/\/blog.mindworkshop.com\/image\/cs0003.png\")
A Certificate Import Wizard will appear. It includes a brief explanation of certificates and certificate stores. We recommend reading this only if you find yourself to be in need of sleep. The world of signing certificates could put bricks into a coma.<\/p>\n![\"picture\"\/](\"https:\/\/blog.mindworkshop.com\/image\/cs0004.png\")
Your Certificate Import Wizard’s Certificate Store field should now have Trusted Root Certificate Authorities<\/b> as its destination.<\/p>\n![\"picture\"\/](\"https:\/\/blog.mindworkshop.com\/image\/cs0006.png\")
As a final note, in what we hope is the highly unlikely event that you subsequently decide that you don’t trust us, or that you’d like to remove the Alchemy Mindworks certificate from your Windows store, doing so is even easier than the foregoing installation procedure was.<\/p>\n\n
Certificate Installation \u2013 Windows 11<\/h6>\n
![\"picture\"\/](\"https:\/\/blog.mindworkshop.com\/image\/cs0010.png\")
In the interest of completeness and full transparency, the following description of the certificate installation procedure is somewhat verbose and detailed. It will invariably take you longer to read than to complete \u2013 it\u2019s all pretty simple.<\/p>\n![\"picture\"\/](\"https:\/\/blog.mindworkshop.com\/image\/cs0011.png\")
A Select Certificate Store window will open \u2013 there\u2019s one illustrated a few paragraphs down. Select the Trusted Root Certificate Authorities<\/b> option, as shown therein, and click on OK.<\/p>\n![\"picture\"\/](\"https:\/\/blog.mindworkshop.com\/image\/cs0012.png\")
As a final note, in what we hope is the highly unlikely event that you subsequently decide that you don\u2019t trust us, or that you\u2019d like to remove the Alchemy Mindworks certificate from your Windows store, doing so is even easier than the foregoing installation procedure was.<\/p>\n\n
Trust<\/h6>\n