MSI – Generate SHA2 certificate with OpenSSL and sign a MSI installer project, use ‘Application Control Policies’-‘AppLocker’ to block unsigned code

Some time ago I had to troubleshoot an issue with signed native C++ XLL add-ins for Excel, which didn’t get loaded with certain combinations of Excel and Windows. Symptom – A client has developed an unmanaged XLL add-in for Excel, which has been signed with a code signing certificate that uses SHA2 as hashing algorithm.- Everything…

3