单击一次由CA签名的完全信任仍然需要管理员权限 [英] Click Once Full Trust signed by CA still requires Admin privileges

问题描述

我已经开发了一个通过clickonce部署的winform应用程序。我已经用Thawte证书签署了清单和可执行文件，并通过Internet进行了部署。我的理解是，只要签名并在客户端计算机上安装了证书（就可以了），就可以为应用启用完全信任，即使用户不是管理员，也不会提示他们输入管理员

I have developed a winform app that I am deploying via clickonce. I have signed the manifest and the executable with a Thawte certificate and it is deployed via the internet. My understanding was that as long as it is signed and the certificate is installed on the client computer (which it is) then you could enable full trust for the app even if the user is not an administrator and they wouldn't be prompted for administrator approval.

安装和更新仍然会提示。

The install and updates still prompt though.

推荐答案

解决了这个问题。

您需要将自己的证书安装为受信任的发布者，将Thawte证书安装为中级证书颁发机构。然后，这是我似乎找不到任何地方记录的最重要的步骤，在VS中右键单击您的项目，转到发布选项卡，单击选项，然后单击清单，然后使用应用程序清单获取信任信息 '

You need to install your own certificate as 'Trusted Publisher' and the Thawte certificate as 'Intermmediate Certification Authority'. Then, the most important step which I couldn't seem to find documented anywhere, right click your project in VS, go to the 'Publish' tab, click 'Options', then 'Manifests', then 'Use application manifest for trust information'

Abracadabra-一旦在您的应用程序中撒满了仙尘，就可以点击魔术。

Abracadabra - magic click once fairy dust is sprinkled all over your app.

希望这对某人有帮助。

Hope this helps someone.

这篇关于单击一次由CA签名的完全信任仍然需要管理员权限的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！