如何阻止我的安装程序触发 Windows 10 的“此应用已被阻止以保护您"错误? [英] How can I stop my installer from triggering Windows 10's "This app has been blocked for your protection" error?

问题描述

Windows 10 的安全功能有时会阻止我的应用程序安装程序不受信任，并显示此应用程序已被阻止以保护您".(我的安装程序经过数字签名.)有 解决方法可供最终用户使用，但这不是一个好的用户体验.

Windows 10's security features sometimes blocks my application installer as not trusted, saying "This app has been blocked for your protection". (My installer is digitally signed.) There are workarounds available for end users, but this is not a good user experience.

我应该怎么做才能让 Windows 10 从我的公司网站下载应用程序时信任我的应用程序?

What should I do so Windows 10 trusts my application when downloaded from my company website?

推荐答案

您可以通过使用受信任的代码签名证书进行签名来提高您的声誉.成熟的企业通过以前使用过代码签名来解决这个先有鸡还是先有蛋的问题(即，早在微软不那么严厉的时候).解决这个先有鸡还是先有蛋的问题的昂贵方法是购买 EV 代码签名证书.假设 这个博文 适用于 Windows 10:

You can improve your reputation by signing with a trusted code-signing certificate. Established businesses resolve this chicken-and-egg problem by having previously used code-signing (i.e., back when Microsoft was less draconian). The expensive way to resolve this chicken-and-egg problem is to buy an EV code-signing certificate. Assuming this blog post applies to Windows 10:

由 EV 代码签名证书签名的程序可以立即使用 SmartScreen 信誉服务建立信誉，即使没有该文件或发布者存在先前的声誉.其他因素是在产生声誉和确定产品时考虑经验和 EV 签署的计划将受到密切监控时间.我们认为这些审查和安全性的改进证书对用户和开发者来说都是一个伟大的发展.

Programs signed by an EV code signing certificate can immediately establish reputation with SmartScreen reputation services even if no prior reputation exists for that file or publisher. Other factors are considered when generating reputation and determining product experiences and EV-signed programs will be closely monitored over time. We think the improvements in the vetting and security of these certificates are a great development for both users and developers.

...

存在 EV 代码签名证书是一个强有力的指标该文件由经过严格审查的实体签署验证过程，并与硬件签署，这允许我们为该实体建立声誉的系统比未签名或非 EV 代码签名的程序.

The presence of an EV code signing certificate is a strong indicator that the file was signed by an entity that has passed a rigorous validation process and was signed with hardware which allows our systems to establish reputation for that entity more quickly than unsigned or non-EV code signed programs.

这不保证有效.

这篇关于如何阻止我的安装程序触发 Windows 10 的“此应用已被阻止以保护您"错误?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！