Codesign软件在Windows 10上仍发出警告 [英] Codesign software still gives a warning on Windows 10

问题描述

我使用良好的证书对安装软件进行了代码签名.我只是注意到Windows 10的当前版本在下面显示了警告消息.Windows 10的早期版本中未出现此错误.如何防止此警告弹出?

I codesign my installation software with a good certificate. I just noticed the current version of Windows 10 shows the warning message below. This did not appear in previous versions of Windows 10. How do I prevent this warning from popping up?

Windows保护了您的PC

Windows protected your PC

Windows Defender SmartScreen阻止了无法识别的应用程序的启动.运行此应用程序可能会使您的PC处于危险之中.

Windows Defender SmartScreen prevented an unrecognized app from starting. Running this app might put your PC at risk.

推荐答案

如果您具有标准的代码签名证书，则应用程序将需要一些时间来建立信任.Microsoft确认扩展验证(EV)代码签名证书允许跳过此信任建立期.根据对Microsoft 而言，扩展的验证证书使开发人员可以立即在SmartScreen中建立声誉.否则，用户将看到类似"Windows Defender SmartScreen阻止无法识别的应用程序启动"的警告.使用两个按钮运行运行此应用可能会使您的PC处于危险之中".和请勿运行".

If you have a standard code signing certificate, some time will be needed for your application to build trust. Microsoft affirms that an Extended Validation (EV) Code Signing Certificate allows to skip this period of trust building. According to Microsoft, extended validation certificates allow the developer to immediately establish reputation with SmartScreen. Otherwise, the users will see a warning like "Windows Defender SmartScreen prevented an unrecognized app from starting. Running this app might put your PC at risk.", with the two buttons: "Run anyway" and "Don't run".

Another Microsoft resource states the following (quote): "Although not required, programs signed by an EV code signing certificate can immediately establish reputation with SmartScreen reputation services even if no prior reputation exists for that file or publisher. EV code signing certificates also have a unique identifier which makes it easier to maintain reputation across certificate renewals."

如果您的证书不是非EV，则它是经过签名的应用程序(例如 .msi 文件)，它会随着时间的推移建立信任关系，而不是证书.例如，证书可以在几个月前颁发并用于对许多文件进行签名，但是对于您发布的每个签名文件，SmartScreen可能需要几天的时间才能在之后不再抱怨该文件.您发布它.当我们发布程序的新的普通Beta版本时，在我们的代码签名证书(非EV)有效期的中期附近，我们仅与SmartScreen发生了一次此类问题.用户于2018年6月29日撰写了有关该问题的文章，该证书的有效期为2016年6月16日至2019年7月17日.我们在2018年6月29日之前和之后频繁发布Beta版本，但这是唯一的SmartScreen情况.抱怨.在此之前或之后，它都没有抱怨.

If your certificate is non-EV, it is a signed application (e.g. an .msi file) that builds trust over time, not the certificate. For example, the certificate can be issued several months ago and used to sign many files, but with each signed file that you publish, it can take a few days for the SmartScreen to stop complaining about that file after you publish it. We had such an issue with SmartScreen just once, near the middle of the validity period of our code signing certificate (non-EV), when we released a new, usual beta version of our program. The users wrote about the problem on June 29, 2018, and the certificate was valid from June 16, 2016 to July 17, 2019. We were releasing beta versions frequently before and after June 29, 2018, but it was the only case when SmartScreen complained. It did not complain before or after that.

您的问题是如何防止此警告弹出.要完全消除此警告，即防止其弹出，您需要使用扩展验证(EV)代码签名证书.

You question was how to prevent this warning from popping up. To eliminate this warning entirely, i.e. to prevent it from popping up, you need to use an Extended Validation (EV) code signing certificate.

这篇关于Codesign软件在Windows 10上仍发出警告的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！