Zotero Word Processor Plugin Insecure

brian.holda

In the Zotero Word Processor Plugin Troubleshooting documentation (https://www.zotero.org/support/word_processor_plugin_troubleshooting), it says:

Under “Add-ins”, make sure that “Require Application Add-ins to be signed by Trusted Publisher” and “Disable all Application Add-ins” are unchecked.

The problem is that our institution does require application add-ins to be signed by trusted publisher, so this is NOT an option to uncheck this.

Can Zotero please have their Add-in signed by a Trusted Publisher so that we can use the MS Word Add-in without needing to uncheck "Require Application Add-ins to be signed by Trusted Publisher"?

dstillman

No, that's a misunderstanding. Those instructions are just troubleshooting steps to help figure out why the plugin might not be showing up on a given computer.

The plugin is digitally signed. It's your institution that would have to add the certificate's publisher (Corporation for Digital Scholarship, our parent organization) as a trusted publisher if they require plugins to come from trusted publishers.

brian.holda

Thanks for the quick reply. Months back I followed documentation for doing this exact thing and yet it still doesn't work.

Here's what I tried:

1. I opened Zotero.dotm in MS Word. Then Developer Ribbon > Visual Basic > Tools > Digital Signature > Detail > Details > Copy to File.

2. I then imported the .cer file to trusted publishers in Microsoft Management Console via windows + R > certmgr.msc > Trusted Publishers > Certificates > Action > All Tasks > Import...

https://s3.amazonaws.com/zotero.org/images/forums/u5226581/5vqynd7rwpsjff9nqchv.png

I can even see it in MS Word via Options > Trust Center > Trust Center Settings > Trusted Publishers.

Yet it still won't show up in Word. Is there something else I'm missing? (of note: when I added the certificate to trusted publishers I was able to get Zotero macros to show up, where they had been blocked previously, just not the actual Zotero Add-in)