Module Signing to sell it via Showcase

3rd Party Modules
1

Hello Everyone,
I'm new in module signing and licensing.

I developed a module with Ignition SDK 8.1 and I have some question about signing the module.

  1. Can I sign, to sell it via Showcase, my module with an in house certificate or have I to sign it with a CA certificate?

  2. I found some CA like DigiCert that sell the Certificate Software Service. Every certificate expires after 1 year. What happens to the module I signed and sold via Showcase when the certificate expires?
    Do I have to re-sign the module with the new not expired certificate?
    Do I have also to reset the modulo to IA to re-validate it?

Thanks in advance.
Stefano

2

  1. You can use any certificate. I have my own internal CA, with which I sign a "module signer" certificate (installed in a Yubikey and a Nitrokey). That latter signs my modules. No matter who signs the module, the Ignition gateway will force the user to review the certificate.

  2. Once accepted, certificate expiration is ignored by Ignition. It will be called out as expired when presented to users on new installs, so you should plan on using certificates that will last longer than your longest likely release/update cycle.