The installer gets flagged because the game isn't Security, it's really Compliance.
Why does my installer get flagged by Windows?
31–40 of 85 posts
Re: Why does my installer get flagged by Windows?
#32Same thing is happening to the web: I put compiled executables in a zip on my website and Chrome flags them as "unknown / untrusted" with a few hoops to download and run it. I understand the advantages of protecting naive users from malware but this is really going to hurt small / independent software developers.
It also drives them to stores which take a significant financial cut.
Yeah... the slippery slope into the walled garden continues.
Re: Why does my installer get flagged by Windows?
#33It's really annoying we don't have a better solution for this. Even outside of open source, I don't want to spend over $600 up front before I sell a single copy of an app just to stop MS from blocking it. And that's not even mentioning companies like sectigo being terrible at their job. I've spent over a week going in circles with their support about verification: "your license shows address A", "no, the back shows t…
Even for our company, we would fork over the $600 but it looks like all of the EV cert options require a hardware signing key. Putting a human in the loop for our otherwise fully automated release process is a non-starter.
You can wire up a microcontroller to push the button as part of your CI/CD.
Re: Why does my installer get flagged by Windows?
#34Earlier quoted context omitted.
Even for our company, we would fork over the $600 but it looks like all of the EV cert options require a hardware signing key. Putting a human in the loop for our otherwise fully automated release process is a non-starter.
Worse still, the SafeNet software that my cert vendor recommends using (to interact with the hardware key) doesn't even allow use of Remote Desktop sessions! It somehow detects if you're in an RDP session, and shows that there are no hardware tokens attached if that's the case. No message or warning whatsoever. My only Windows PC is headless and I lost several hours trying to debug this. The entire EV cert process is…
Oh man I totally got hit by that and never did figure out being in rdp was the reason!
Re: Why does my installer get flagged by Windows?
#35Earlier quoted context omitted.
Even for our company, we would fork over the $600 but it looks like all of the EV cert options require a hardware signing key. Putting a human in the loop for our otherwise fully automated release process is a non-starter.
Worse still, the SafeNet software that my cert vendor recommends using (to interact with the hardware key) doesn't even allow use of Remote Desktop sessions! It somehow detects if you're in an RDP session, and shows that there are no hardware tokens attached if that's the case. No message or warning whatsoever. My only Windows PC is headless and I lost several hours trying to debug this. The entire EV cert process is…
Can you use a VNC server instead as a workaround, or does it detect that too?
Re: Why does my installer get flagged by Windows?
#36Earlier quoted context omitted.
It also drives them to stores which take a significant financial cut.
Yeah... the slippery slope into the walled garden continues.
More like a trapdoor in a lot of ways.
Without a cert etc most people shouldn't be installing the applicarion at all. Thats the simple advice for most people, especially if some other trust is already in place, eg from someone you actually trust.
Re: Why does my installer get flagged by Windows?
#37Earlier quoted context omitted.
Even for our company, we would fork over the $600 but it looks like all of the EV cert options require a hardware signing key. Putting a human in the loop for our otherwise fully automated release process is a non-starter.
You can automate code signing using Microsoft azure key vault. I did it last month, no need for a dongle nor a pin number
It's iOS all over again.
Computing freedom is something only enthusiasts have now.
Re: Why does my installer get flagged by Windows?
#38Even Microsoft own software must go through this.
Try to download dotnet SDK ci build and you will have the same thing.
Re: Why does my installer get flagged by Windows?
#39Earlier quoted context omitted.
Even for our company, we would fork over the $600 but it looks like all of the EV cert options require a hardware signing key. Putting a human in the loop for our otherwise fully automated release process is a non-starter.
You can automate code signing using Microsoft azure key vault. I did it last month, no need for a dongle nor a pin number
So MS sells a solution to a problem they caused? fantastic, whats new.
Re: Why does my installer get flagged by Windows?
#40Nice article!
A few years ago I had to go through the process of getting a certificate for signing Windows application. I provide some details here: https://henvic.dev/posts/cs-security/