Signing your code ensures that it is not tampered with and is actually provided by you, but does not verify your identity. Software systems, applications, and mobile networks rely on the certificate authority's root certificate to determine the validity of a digital signature. A third-party CA is more trusted than a self-signed certificate because the certificate requester must undergo a review or validation process. The prevalence of Symantec root certificates is unmatched. Our root certificates are preinstalled on most devices and built into most applications, providing a secure and seamless installation process for end users.
To improve security and improve management, Symantec recommends that developers purchase a separate code signing certificate instead of a shared certificate. If the certificate must be revoked because it has been compromised, all applications signed by that certificate will be disabled. Symantec recommends purchasing a code signing certificate for each development platform. To use the same certificate across platforms, you need to convert using a different utility.
How does someone know that they can trust my signature? How many code signing certificates do I need?