How to make an InfoPath 2003 form fully trusted

You can make an InfoPath form fully trusted by either creating an msi file or digitally signing it.

(1) In order to create an msi file refer the following article:
http://msdn.microsoft.com/librarydefault.asp?url=/library/en-us/ipsdk/html/ipsdkUnderstandingFullyTrustedForms_HV01073332.asp

(2) For digitally signing the form:
Add “Full Trust” and “Sign the XSN” with a digital certificate

A. From the Tools menu, choose Form Options

B. Select the Security Tab

C. Uncheck the option “Automatically determine security level...” and enable the “Full Trust” option

D. Enable the “Sign this form” option and either select or create a digital certificate. **

** If you choose to “Create” a certificate, this creates a “self-cert” which is only valid on the machine in which it was created.

Refer the following articles to know more on getting a certificate from trusted authority so that it will be valid on all the machines within the intranet:

(a) Cryptography for Network and Information Security

http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=/resources/documentation/Windows/2000/server/reskit/en-us/distrib/dsch_key_msjr.asp


(b) Setting up a Certificate Authority

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/xmlsdk/html/29ff74a2-249a-4ecf-8a2a-ff0ba572e4db.asp

(c) Building an Enterprise Root Certification Authority in Small and Medium Businesses

http://www.microsoft.com/technet/security/prodtech/windowsserver2003/build_ent_root_ca.mspx


In order to know if the certificate has been successfully installed on the system; do the following:

Go to Start à Run à type “certmgr.msc”

This will open up “Certificates” window.

Select “Trusted Root Authorities” à Certificates



** Once you are done with this, follow the steps specified in the article below for publishing/deploying a fully trusted form to Share point site:

http://msdn.microsoft.com/library/en-us/ipsdk/html/ipsdkDeployURNFormToSharePoint_HV01086376.asp