Missing digital signature for word add-in
Hi
My institute only allows digitally signed word add-ins for security reasons. The zotero I have installed (that I also reinstalled today) is not digitally signed. When I google solutions to this I see you answer another discussion saying it is signed (https://forums.zotero.org/discussion/98947/digitially-signing-zotero-word-add-in). But I, like the person that started that discussion, only see
Add-in: Zotero.dotm
Publisher:
Location: C:\Users\\AppData\Roaming\Microsoft\Word\STARTUP
when I look in File > Options > Add-Ins in word. When I do what is then suggested and go into the developer tab and the zotero Tools > Digital signature it says the Certificate name is Corporation for Digital Scholarship. When I click "detail..." it says the certificate expired on the 6th of January 2024.
Is there something I'm missing or will you issue a new digital signature? What can I do?
I also have colleagues that have the same certificate with no publisher but their add-in still works without them having done anything specific.
My institute only allows digitally signed word add-ins for security reasons. The zotero I have installed (that I also reinstalled today) is not digitally signed. When I google solutions to this I see you answer another discussion saying it is signed (https://forums.zotero.org/discussion/98947/digitially-signing-zotero-word-add-in). But I, like the person that started that discussion, only see
Add-in: Zotero.dotm
Publisher:
Location: C:\Users\\AppData\Roaming\Microsoft\Word\STARTUP
when I look in File > Options > Add-Ins in word. When I do what is then suggested and go into the developer tab and the zotero Tools > Digital signature it says the Certificate name is Corporation for Digital Scholarship. When I click "detail..." it says the certificate expired on the 6th of January 2024.
Is there something I'm missing or will you issue a new digital signature? What can I do?
I also have colleagues that have the same certificate with no publisher but their add-in still works without them having done anything specific.
https://forums.zotero.org/discussion/comment/451975/#Comment_451975
When I click this I get more info that says
"Active content might contain malware and other security hazards. If you trust the contents of the file, you may enable this active content: COM Add-ins and Macros. Note: Other types of active content may be disabled in Trust Center or by your organization".
I then tried to see if I could enable it.
In my word's Trust Center Macro settings the options are greyed out so I cannot change them, and "disable all macros except digitally signed macros" is the only one checked. In Trust Center > Add-ins (COM, VSTO, and Other) the options "Require Application Add-ins to be signed by Trusted Publisher" and "Disable notification for unsigned add-ins (code will remain disabled)" are greyed out and checked.
Hi
I stopped getting responses on my old thread before the issue was solved (https://forums.zotero.org/discussion/comment/453501#Comment_453501). So I thought I'd try again.
My institute only allows digitally signed word add-ins for security reasons. The zotero I have installed is not digitally signed. When I google solutions to this I see you answer another discussion saying it is signed (https://forums.zotero.org/discussion/98947/digitially-signing-zotero-word-add-in). But I, like the person that started that discussion, only see
Add-in: Zotero.dotm
Publisher:
Location: C:\Users\\AppData\Roaming\Microsoft\Word\STARTUP
when I look in File > Options > Add-Ins in word. When I do what is then suggested and go into the developer tab and the zotero Tools > Digital signature it says the Certificate name is Corporation for Digital Scholarship. When I click "detail..." it says the certificate expired on the 6th of January 2024.
I was told this shouldn't be the problem.
Me and my colleagues ought to have the same institute applied security settings, and they can see and use the add-in in their word programs, so it should be possible for me too.
I was then asked if I see the ribbon when I open the Zotero.dotm directly.
I do not and a notification pops up that doesn't come when I open word regularly. It says "content blocked: Macros in this document have been disabled by your enterprise administration for security reasons".
When I click this I get more info that says
"Active content might contain malware and other security hazards. If you trust the contents of the file, you may enable this active content: COM Add-ins and Macros. Note: Other types of active content may be disabled in Trust Center or by your organization".
I then tried to see if I could enable it.
In my word's Trust Center Macro settings the options are greyed out so I cannot change them, and "disable all macros except digitally signed macros" is the only one checked. In Trust Center > Add-ins (COM, VSTO, and Other) the options "Require Application Add-ins to be signed by Trusted Publisher" and "Disable notification for unsigned add-ins (code will remain disabled)" are greyed out and checked.
It's already been 19 days since I last got a response. Please help. I would like to use zotero. I am not the only one with this problem. Someone else has commented on my old discussion.
You'll need to ask your IT department to allow Corporation for Digital Scholarship as a trusted publisher. That's not something we can help with.
(But you should make sure they allow the new certificate in Z7, since that will be used going forward.)
https://s3.amazonaws.com/zotero.org/images/forums/u8647834/411ci48i705pdfuhc09p.png. There's more than one because I tried it for zotero 6 and two different ways for zotero 7. One of the "issued by" is the same as the certificate when I look in the word tab Developer > Visual basic > Tools > Digital signature. So the publisher should be trusted now. Could IT still have to unblock something? I have sent them a request but am waiting for an answer :)
IT had to add my user to some group that is allowed to use zotero. It didn't sound like it would be so easy.
Thanks very much for the help :D