如何阻止我的安装程序触发 Windows 10 的“此应用程序已被阻止以保护您"?错误? [英] How can I stop my installer from triggering Windows 10's "This app has been blocked for your protection" error?

问题描述

Windows 10 的安全功能有时会将我的应用程序安装程序阻止为不受信任，并说此应用程序已被阻止以保护您".(我的安装程序经过数字签名.)有 解决方法适用于最终用户，但这不是一个好的用户体验.

Windows 10's security features sometimes blocks my application installer as not trusted, saying "This app has been blocked for your protection". (My installer is digitally signed.) There are workarounds available for end users, but this is not a good user experience.

我应该怎么做才能让 Windows 10 在从我的公司网站下载我的应用程序时信任我的应用程序?

What should I do so Windows 10 trusts my application when downloaded from my company website?

推荐答案

您可以通过使用受信任的代码签名证书进行签名来提高您的声誉.老牌企业通过以前使用代码签名(即在微软不那么严厉的时候)解决了这个先有鸡还是先有蛋的问题.解决这个先有鸡还是先有蛋问题的昂贵方法是购买 EV 代码签名证书.假设 这个博文适用于 Windows 10:

You can improve your reputation by signing with a trusted code-signing certificate. Established businesses resolve this chicken-and-egg problem by having previously used code-signing (i.e., back when Microsoft was less draconian). The expensive way to resolve this chicken-and-egg problem is to buy an EV code-signing certificate. Assuming this blog post applies to Windows 10:

由 EV 代码签名证书签名的程序可以立即使用 SmartScreen 声誉服务建立声誉，即使没有该文件或发布者的先前声誉存在.其他因素是在产生声誉和确定产品时考虑经验和 EV 签署的计划将受到密切监控时间.我们认为在审查和安全方面的改进证书对用户和开发者来说都是一个伟大的发展.

Programs signed by an EV code signing certificate can immediately establish reputation with SmartScreen reputation services even if no prior reputation exists for that file or publisher. Other factors are considered when generating reputation and determining product experiences and EV-signed programs will be closely monitored over time. We think the improvements in the vetting and security of these certificates are a great development for both users and developers.

...

EV 代码签名证书的存在是一个强有力的指标该文件是由通过严格审查的实体签署的验证过程并用硬件签名，这允许我们为该实体建立声誉的系统比未签名或非 EV 代码签名的程序.

The presence of an EV code signing certificate is a strong indicator that the file was signed by an entity that has passed a rigorous validation process and was signed with hardware which allows our systems to establish reputation for that entity more quickly than unsigned or non-EV code signed programs.

这不能保证有效.

这篇关于如何阻止我的安装程序触发 Windows 10 的“此应用程序已被阻止以保护您"?错误?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！