问题
I codesign my installation software with a good certificate. I just noticed the current version of Windows 10 shows the warning message below. This did not appear in previous versions of Windows 10. How do I prevent this warning from popping up?
Windows protected your PC
Windows Defender SmartScreen prevented an unrecognized app from starting. Running this app might put your PC at risk.
回答1:
If you have a standard code signing certificate, some time will be needed for your application to build trust. Microsoft affirms that an Extended Validation (EV) Code Signing Certificate allows to skip this period of trust building. According to Microsoft, extended validation certificates allow the developer to immediately establish reputation with SmartScreen. Otherwise, the users will see a warning like "Windows Defender Smartscreen prevented an unrecognized app from starting. Running this app might put your PC at risk.", with the two buttons: "Run anyway" and "Don't run".
Another Microsoft resource states the following (quote): "Although not required, programs signed by an EV code signing certificate can immediately establish reputation with SmartScreen reputation services even if no prior reputation exists for that file or publisher. EV code signing certificates also have a unique identifier which makes it easier to maintain reputation across certificate renewals."
If your certificate is non-EV, it is a signed application (e.g. an .msi
file) that builds trust over time, not the certificate. For example, the certificate can be issued several months ago and used to sign many files, but with each signed file that you publish, it can take a few days for the SmartScreen to stop complaining about that file after you publish it.
来源:https://stackoverflow.com/questions/50956108/codesign-software-still-gives-a-warning-on-windows-10