In response to a previous post that I had, LegareColeman had indicated that the problem that I was having with Excel 97 macros in Excel 2000 might be that the macro security setting was at High and that unsigned macros were being automatically disabled. It turned out that that was the problem. Can someone tell me what an “unsigned macro” is and if there’s a way that I should be “signing” my macros so that they aren’t disabled?
![]() |
There are isolated problems with current patches, but they are well-known and documented on this site. |
SIGN IN | Not a member? | REGISTER | PLUS MEMBERSHIP |
-
Unsigned macro (Excel 97)
Home » Forums » AskWoody support » Productivity software by function » MS Excel and spreadsheet help » Unsigned macro (Excel 97)
- This topic has 6 replies, 5 voices, and was last updated 23 years, 1 month ago.
Viewing 1 reply threadAuthorReplies-
H. Legare Coleman
AskWoody PlusApril 30, 2002 at 3:49 pm #585438Excel has the capability to attach an electronic signature to a macro that excel can use to identify the author of the macro. If Excel is told that it can trust that author, then when Excel sees macros that match the electronic signature, then the macro is enabled if security is high, and if security is medium, the user is not asked if the macros should be enabled.
You have to buy the electronic signature from one of several companies that sell them, an provide a service to validate signatures. If you get the Excel 2000 developers edition, it comes with a way to create your own signature.
-
WSptebo
AskWoody Lounger -
WSdcardno
AskWoody LoungerApril 30, 2002 at 5:35 pm #585471As a further thought to the ‘signing macro’ question – when I last looked Verisign wanted $400 USD annually to provide authentication services, and it looked like they were asking for the equivalent of and SEC 10K or something to even consider providing it. After I e-mailed them to say that this was an astoundingly high charge they called me back to say that they consider that they are providing a guarantee that I will not be writing malicious code, and there is a high cost of providing that assurance to the user.
This is nonsense, as all Verisign provides is assurance that if the code was signed by “D Cardno” that it actually came from D Cardno and has not been altered. Anyone who chooses to run code from D Cardno on their computer is taking their chances based on what they know of me (heh heh heh….) – the signature just reduces the risk that they are getting damaged (or deliberately altered) goods in the process. The nice lady from Verisign didn’t seem to understand that concept, and in our litigious age, perhaps they are providing a warranty that they don’t intend to, but will be forced on them by the courts – I doubt it, but you never know.
In any event, if you make your living by selling VBA or VB code, then it is probably worth it to get the signature system set up – but then you probably have the developer’s edition anyway. If, like me, you sell the occasional bit of code in connection with analysis of a much larger problem (I do financial and economic analyses of pipelines and power plants – every now and then it is helpful to automate some of the iterative calculations) then it is not worth it.
My clients just have to trust me to write code that won’t screw up anything on their computers (just like they would if I used Verisign anyway). For integrity of code between me and them, I encrypt e-mails with PGP: if they don’t have it I recommend that they get it and use it. If they don’t I tell them that I will not be responsible for loss of confidentiality or errors in transmission due to insecure e-mail communication, and suggest that we just exchange floppies. Inevitably, they accept the e-mail risk in the interests of speedy, convenient communication.
People can be swept into mass hysteria by the Kournikova virus, and practically wet themselves at the suggestion that a ‘hacker’ could break into their data files on a reasonably secure server that no one has any interest in, but they will not take the most basic easily-implemented steps to protect against an insecure communications channel open to anyone who is curious!
-
WSjujuraf
AskWoody LoungerMay 1, 2002 at 4:36 pm #585681I agree with you about what a digital cert buys you. They make it sound like it guarantees that your code will work as advertised when actually it just lets the end user know that you are who you claim to be, nothing about code quality. It does however help notify the user if the code has been tampered with by someone other than you.
I do have the Office Developer’s kit but I still bought the certificate from Thawte which is 1/2 the price of VeriSign (although they are owned at least partly by VeriSign it seems).The one that comes with the Dev kit is very wimpy as far as security goes. For my company’s use, the advantages are more of an increased confidence that what the end user has did come from who they say it came from. Many people are afraid to run anything with macros and all the neat and cool tools my group writes use macros.
I’ve had other non-Office related horror stories about digital certificates though. One device driver I have (CD-RW I think) supposedly had a signature that Win2k didn’t like and so it disabled it automatically. This didn’t interfere with the CD/RW until I rebooted and then Win2k prompty removed the driver for me with some messaging about the driver’s signature. The company says their driver is compatible with Win2k but Win2k keeps disabling it. No win situation.
Deb
-
-
-
WSunkamunka
AskWoody LoungerApril 30, 2002 at 10:26 pm #585529If your copy of Excel 2000 has been installed with the Digital Signature option, you’ll find that there’s a handy little program called SelfCert.exe installed – default location: C:Program FilesMicrosoft OfficeOffice folder.
Click on that and it will step you through the necessary steps on creating a Digital Certificate for no cost other than your time. Having done that, choose the relevant module in your VBE and click on Tools|Digital Signature and you will be able to sign the code.
The signature will travel with your code. It will not, of course, be a supersonic Verisign signature, but, for users that choose to trust you – on whatever Excel 2000 machine – it will remove the message on Medium security. I seem to remember, on a High security machine, you may first have to go through the “Trust” message box on a Medium security setting before you can get the code to run on High security, but I’m not sure. Maybe Legare can remember. HTH
-
WSptebo
AskWoody Lounger
-
Viewing 1 reply thread -

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Search Newsletters
Search Forums
View the Forum
Search for Topics
Recent Topics
-
My Simple Word 2010 Macro Is Not Working
by
mbennett555
8 hours, 44 minutes ago -
Office gets current release
by
Susan Bradley
13 hours, 28 minutes ago -
FBI: Still Using One of These Old Routers? It’s Vulnerable to Hackers
by
Alex5723
1 day, 6 hours ago -
Windows AI Local Only no NPU required!
by
RetiredGeek
14 hours, 31 minutes ago -
Stop the OneDrive defaults
by
CWBillow
1 day, 6 hours ago -
Windows 11 Insider Preview build 27868 released to Canary
by
joep517
1 day, 16 hours ago -
X Suspends Encrypted DMs
by
Alex5723
1 day, 18 hours ago -
WSJ : My Robot and Me AI generated movie
by
Alex5723
1 day, 19 hours ago -
Botnet hacks 9,000+ ASUS routers to add persistent SSH backdoor
by
Alex5723
1 day, 19 hours ago -
OpenAI model sabotages shutdown code
by
Cybertooth
1 day, 20 hours ago -
Backup and access old e-mails after company e-mail address is terminated
by
M W Leijendekker
1 day, 8 hours ago -
Enabling Secureboot
by
ITguy
1 day, 15 hours ago -
Windows hosting exposes additional bugs
by
Susan Bradley
2 days, 4 hours ago -
No more rounded corners??
by
CWBillow
2 days ago -
Android 15 and IPV6
by
Win7and10
1 day, 13 hours ago -
KB5058405 might fail to install with recovery error 0xc0000098 in ACPI.sys
by
Susan Bradley
2 days, 16 hours ago -
T-Mobile’s T-Life App has a “Screen Recording Tool” Turned on
by
Alex5723
2 days, 19 hours ago -
Windows 11 Insider Preview Build 26100.4202 (24H2) released to Release Preview
by
joep517
2 days, 14 hours ago -
Windows Update orchestration platform to update all software
by
Alex5723
3 days, 2 hours ago -
May preview updates
by
Susan Bradley
2 days, 14 hours ago -
Microsoft releases KB5061977 Windows 11 24H2, Server 2025 emergency out of band
by
Alex5723
2 days, 5 hours ago -
Just got this pop-up page while browsing
by
Alex5723
2 days, 18 hours ago -
KB5058379 / KB 5061768 Failures
by
crown
2 days, 16 hours ago -
Windows 10 23H2 Good to Update to ?
by
jkitc
1 day, 18 hours ago -
At last – installation of 24H2
by
Botswana12
3 days, 18 hours ago -
MS-DEFCON 4: As good as it gets
by
Susan Bradley
16 hours ago -
RyTuneX optimize Windows 10/11 tool
by
Alex5723
4 days, 6 hours ago -
Can I just update from Win11 22H2 to 23H2?
by
Dave Easley
2 days, 4 hours ago -
Limited account permission error related to Windows Update
by
gtd12345
4 days, 19 hours ago -
Another test post
by
gtd12345
4 days, 20 hours ago
Recent blog posts
Key Links
Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.
Mastodon profile for DefConPatch
Mastodon profile for AskWoody
Home • About • FAQ • Posts & Privacy • Forums • My Account
Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts
Copyright ©2004-2025 by AskWoody Tech LLC. All Rights Reserved.