Introduction

As one of the new security features in Windows Vista/7, User Account Control (UAC) is designed to protect the user by identifying programs that are potentially harmful, halting their execution and asking for confirmation from the user before continuing. When a program such as an installation executable requests administrative privileges, UAC will bring up a dialog box asking for permission to continue. This added layer of protection helps to stop malicious programs such as trojans from running unnoticed.

When a program is run, UAC will check the program and verify its digital signature. UAC will pop up a grey dialog box for a program with a valid signature and a yellow box for all others. If the program is corrupt or modified, then UAC will also display a yellow dialog box.

Since UAC checks digital signatures to verify a program's integrity, we have embedded one into the installer. Unfortunately, Windows only recognizes signatures signed by certificates from large authorities such as Verisign, and to purchase such a certificate would require articles of incorporation which we don't have. Instead, we have made our own root certificate to integrate into Windows.

The main benefit of installing this root certificate is so you know what you're downloading is virus-free, unmodified and from the actual source. Only one of Sekai Project's members has the authority to sign programs using the certificate. An additional benefit comes with the new entry we've added into the Games Explorer in Windows Vista/7. Ratings and parental controls only become active if the Sekai Project certificate is installed on the system.

Warning

For parental controls to function properly, the Sekai Project root certificate MUST be installed prior to registering the game with Games Explorer.


UAC - No valid signature	UAC - Valid signature

Installation

Download the root certificate from http://www.sekaiproject.net/files/?file=sekaiprojectca.der
Double-click the file. A new window will be opened. It is safe to ignore the bolded text.
Click on "Install Certificate". The installation window will be opened.
Click "Next". Click the radio button next to "Place all certificates in the following store", click "Browse" and choose "Trusted Root Certification Authorities".
Click "Next". You should now be prompted to install the certificate. Verify that the thumbprint matches the one in the screenshot below, then click "Yes" to install the certificate.