signing active x components

i made a ocx that records voice - wrapper over MCI commands

- i could refer to it in a web page with the help of InterDev 6.0.

And by making my site a trusted site - i was able to run the Active X as well

( can see it at tgkprog.tripod.com/actXtst/MciVoiceRecTstOcx.html )

But since it is not signed - the Run script Yes/No dialog box comes up every time one access the page.

I would like to mark the OCX as safe for scripting and to sign it

i tried to follow what was on the MS web site but as i see it i need to pay for a signature from VERISIGN or other co

can i make my own test signature and sign an OCX ?

I was able to make a signature using the inetsdk ( http://msdn.microsoft.com/library/de...g_cert2spc.asp ) and import it in my IE certificates as one issued by "ROOT Agency"

for this i first set ROOT to be trusted using the setreg.exe

BUT am still not able to sign the OCX with my .spc file using signcode.exe

it needs a private key or a Key container name

Any one got directions or a link to a tutoriual that works !