Signing executables for Windows

Question

I develop a desktop application for use on Windows, and was wondering how I can get my executables signed so they stop showing those horrible looking warning messages about being from an unknown publisher. I am somewhat familiar with signing binaries before releasing them. I have a Linux port of the same program which is distributed though it's own signed repository (apt-get).

The process for signing windows executables seems extremely complicated and I can't find a simple tutorial on what to do, rather thousands of webpages describing only parts of the process, or which go into way too much depth.

I just need a quick list of steps which are necessary to sign executables under windows. I believe it's called "authenticode".

Answer 1

Tools see MSFT Introduction to Code Signing

edit: you buy a certificate from a provider - most web registrars sell them.
Then simply sign the executable using the msft tools

see http://www.instantssl.com/code-signing/code-signing-process.html