Windows 10 does not like installer
Windows 10 site worries the users:
Windows protected your PC
Windows SmartScreen prevented an unrecognized app from starting. Running
this app might put
your PC at risk.
App: app_installer.exe
Publisher: Unknown Publisher
Is the problem with the SB installer or my app?
Sim
Re: Windows 10 does not like installer
If it says "unknown publisher" that sounds as if your installer is not
code-signed?
jf
Re: Windows 10 does not like installer
The app itself IS code-signed.
How do I code-sign the installer?
Sim
Re: Windows 10 does not like installer
Project Menu --> Settings --> Digital Signature Tab.
You might need to scroll the tabs in the sheet to get there.
OR
Click on the "General Information" tree item and find the digital
signature thing on the right side.
Jeff Slarve
www.jssoftware.com
Twitter free since Jan 11, 2016
I'll search help files & Google for you.
Grammar troll's, are the worse.
Re: Windows 10 does not like installer
Watch the #3 video at this link: http://www.beachbunnysoftware.com/SBVideo/
Jane Fleming
Re: Windows 10 does not like installer
Hi Sim,
> The app itself IS code-signed.
> How do I code-sign the installer?
http://screencast.com/t/9p6bupxYSSjY
Best regards,
--
Arnor Baldvinsson
Icetips Alta LLC
Re: Windows 10 does not like installer
Sim,
> Is the problem with the SB installer or my app?
What Jane, Jeff and Arnor said. Please note that you need a valid SHA-2
signature (SHA-1 is not enough because Microsoft depreciated it on January
01, 2016) on Windows 10, Windows 8.x, etc.. You should dual code-sign your
installer to provide backward compatibility to older Windows operating
systems.
Friedrich
Re: Windows 10 does not like installer
Ah! That's probably it. SHA-1 vs SHA-2.
Thanks Friedrich.
Sim
Re: Windows 10 does not like installer
Hi Friedrich
More worriing are the reputation thing. I have everything SHA-1 + SHA-2
signed, and yet my customers have to 'run anyway'. Do you have any idea how
many downloads it needs to get a solid reputation ?
Very strange: I know a programmer (clarion) who make an installer (
setup.exe ) and install to c:\myownpath . No signing at all. Gives no nag
screen, no 'Run anyway'. just a pure install. Even on Win 10. How can this
be possible ?
Med venlig hilsen
Viggo Poulsen
Vipilon
Re: Windows 10 does not like installer
Hi Viggo,
> More worriing are the reputation thing. I have everything SHA-1 + SHA-2
> signed, and yet my customers have to 'run anyway'. Do you have any idea
> how many downloads it needs to get a solid reputation ?
> Very strange: I know a programmer (clarion) who make an installer (
> setup.exe ) and install to c:\myownpath . No signing at all. Gives no nag
> screen, no 'Run anyway'. just a pure install. Even on Win 10. How can this
> be possible ?
It has nothing to do with install. The download is the critical part here.
For code signing certificates, Windows stopped accepting SHA-1 signed code
and SHA-1 certificates that are time stamped after 1 January 2016 and have a
"Mark of the Web" attribute. A "Mark of the Web" attribute means that the
executable is flagged as downloaded from an untrusted source (e.g. the
Internet). Code signature status behavior might depend on specific Policy
settings and Trusted Zones, and SmartScreen data may be used to allow
certificates with good reputation. Download your friend's "unsigned"
install from the Web and try to start it on Windows 10 or Windows 8.1 and
you'll see what I mean ;-)
BTW, then there is the "User Access Control: Only elevate executables that
are signed and validated" Group Policy. A user with a high level of
security should have this policy ENABLED (and most large corporation have).
If this policy is enabled, the unsigned, tampered, hacked, or incomplete
application does not even start.
Friedrich