Macro settings (1 Viewer)

[CedarTree]

Hello. IT policy is now limiting macros in Macro settings. They mentioned we could use a digital signature for our end-users. Any advice/suggestions on how to go about doing that? Thanks!

 

[theDBguy]

Would they be paying for it?

 

[CedarTree]

I suppose they would be... didn't know there was a cost!

 

[The_Doc_Man]

Here is a detailed discussion of how to digitally sign an Access project.

Simplest way how to digitaly sign MS Access database for free to get rid off annoying security warning

I think it's time to stop turning off the macro security thingy in the MS-Office. It seems to be more and more complicated with the newer office versions anyway. Instead, I'd like to assign a digital

stackoverflow.com

There is a caveat. Digital signatures come in various flavors - and various costs. Mechanically, it is easy to apply a digital signature. But self-signing is limited in use. If your company has a usable signing certificate that you can be permitted to apply, you have what you need. Otherwise, look into "trusted locations" and talk to your IT group on the idea that Access, to be fully functional, REQUIRES a macro capability. AND frequently something another utility would call a macro is implemented in VBA.

Thinking ahead, the question will come up: Why do you want this in the first place? This is NOT a question you should be answering. If the DB is something your boss wants, s/he needs to handle the "WHY" questions. You only need to worry about the "HOW" questions.

 

[Gasman]

Have a read here as well.

 

[theDBguy]

I suppose they would be... didn't know there was a cost!

Oh yeah, and it's not a small cost.

 

[isladogs]

Unfortunately the Stackoverflow thread linked in post #4 dates back to 2014 and much of the information is not up to date

I've used digital signatures for about 10 years, first to sign EXE files used to distribute my Access apps. More recently to also sign the VBA projects for my ACCDB/ACCDE once that functionality was added in 2022
Unrelated changes made in 2023 now mean that code signing certificates are VERY expensive.

Trusted locations should definitely be used if your IT department allows that. Using trusted locations also means that code will run much faster.

Is Location Trusted?

This article includes updated code to check whether an Access app is running from a trusted location. It also explains why using a trusted location is better than just trusting the Access app itself.

isladogs.co.uk

 

[The_Doc_Man]

I defer to Colin's expertise on the changes in signature issues. His work is more recent than mine. I retired from the place where digital signatures mattered over 8 years ago. The concept stands. The tricky part of the signature solution is getting the relevant signature file, which is not free. Declaration and recognition of a "trusted area" is performed internal to your company and CAN be zero-dollar cost. The "Trust Center" options are available through the Access ribbon via File >> Options >> Trust Center. The "Trusted Location" is just a matter of where you put the files.