This was previously posted in dotnet.framework.interop, but no replies were
received.

Hello,

We've got a mixed mode application, which includes MFC/ATL and is written in
mainly C++ and some MC++.  We are extending our product by calling assemblies
that have been written in C#.  We've gotton through the hurdles of making
this work.

The issue comes up with trusted assemblies.  Some of our users run our
application from a network share.  In order to execute a .net application,
trust must be setup.  Otherwise, an exception is thrown and the program
cannot be run.

Up to this point, we have had a digital signature, which is signed to the
mixed mode .exe in addition to each managed assembly (.dll).  All is well,
accept we had to create an MSI which would add trust to our assemblies.  It
then has to be run on each workstation.  The MSI adds a new entry to the .NET
configuration tool (Control Panel->Administrative Tools) into the My
Computer->Runtime Security Policy->Machine->Code
Groups->All_Code->MyCompanyNameHere entry.

Although this is a pain, because the computers don't have admin rights, and
the MSI has to be run by an admin, and users don't have those rights.

This has worked, however we found out that the digital signature only lasts
one year.  After that we have to resign the .exe and dll's AS well as create
a new MSI which must be run again on each workstation.

Is there a better way to do this, so that we don't need to go through the
hassles of resigning the code files as well as creating and executing (on
each workstation) the .MSI.

Many Thanks,

Paul