title: Avoid security alert "Do you want to run this application?" for a JWS app
body: <p>We have a Java application that uses RxTx to update the firmware of our game console. To avoid security alerts when the users starts the Java application on our website through WebStart we have bought a trusted certificate and signed the application with that. All checks indicate that it is successfully signed and if I launch the application via Safari on my Mac(OS X 10.6.8) with Java 1.6.0_41 it starts without any complains.</p>
  
  <p>But if I launch it using IE9 on a Windows 8 machine I get an alert saying "Do you want to run this application? This application will run with unrestricted access which may put your computer and personal information at risk. Run this application only if you trust the publisher. This application's digital signature has expired. More Information".</p>
  
  <p>If I click the More Information I get "This application will run with unrestricted access to your personal files and other facilities(webcam, microphone) on your computer.</p>
  
  <p>Although the application has a digital signature, the application's associated file(JNLP) does not have one. A digital signature ensures that a file is from the vendor and that it has not been altered.</p>
  
  <p>The digital signature was generated with a trusted certificate."
  I have tried to find a solution how to not get this message and think what I need to do is sign the JNLP file(i.e. copy it into the jar as pointed out <a href="https://www.servoy.com/forum/viewtopic.php?f=6&amp;t=15329#p82360" rel="nofollow">here</a>) but what I cannot find is how to get NetBeans to do that! I'm using NetBeans 6.9.1. Anyone know how to do this and if it is enough to sign the JNLP?</p>
  
  <p>To verify that the file was correctly signed I did the following:</p>
  
  <pre><code>jarsigner -verify -certs -verbose OribooDesktopClient.jar 
  
      6396 Thu Feb 28 17:14:14 CET 2013 META-INF/MANIFEST.MF
      6354 Thu Feb 28 17:14:14 CET 2013 META-INF/MOVINTOF.SF
      1843 Thu Feb 28 17:14:14 CET 2013 META-INF/MOVINTOF.RSA
         0 Thu Feb 28 17:07:28 CET 2013 META-INF/
         0 Thu Feb 28 17:07:26 CET 2013 oribooDesktopClient/
         0 Thu Feb 28 17:07:26 CET 2013 oribooDesktopClient/resources/
         0 Thu Feb 28 17:07:26 CET 2013 oribooDesktopClient/resources/busyicons/
  sm      3912 Thu Feb 28 17:07:26 CET 2013 oribooDesktopClient/BBDatabase.class
  
    X.509, CN=Movinto fun AB, O=Movinto fun AB, STREET=?rev?gen 138, L=?re, ST=J?mtland, OID.2.5.4.17=83013, C=SE
    [certificate is valid from 2/28/13 1:00 AM to 3/1/14 12:59 AM]
  
  sm      2497 Thu Feb 28 17:07:26 CET 2013 oribooDesktopClient/Binary.class
  
    X.509, CN=Movinto fun AB, O=Movinto fun AB, STREET=?rev?gen 138, L=?re, ST=J?mtland, OID.2.5.4.17=83013, C=SE
    [certificate is valid from 2/28/13 1:00 AM to 3/1/14 12:59 AM]
  ....
  </code></pre>