This code then downloads the program in the background and this would often work.

One potential way to get around this, at least relatively recently, was to have an installer that changes code very infrequently. This blog has some interesting statistics and spotted some potential patterns: However, by submitting new releases here: you may be able to increase reputation. The only definite way to speed this up is to get EV certificates. What I think is happening now is that your signing certification is still seen as relatively new, and needs to build up reputation, but because the previous software release was all ok I would expect that reputation build up is quicker this time.

Because you've got a new certificate, it took some time for your software to be verified as safe. Although the binaries passed the tests, it did not have visible effect on the SmartScreen check.Īs you've figured out you can't transfer it, and you're stuck without using EV. We have tried to submit the files for malware analysis to Microsoft. Or is there a way to help the reputation to transfer somehow? Is that expected? Is the reputation really not transferred to the renewed certificate? If not, what does it take to build the reputation again? The new (beta) version of our software (signed with the renewed certificate) is out for few days already, and it has tens of thousands of installations, but it still triggers the warning. But now, signed with the renewed certificate, our software triggers the SmartScreen warning. It is a plain certificate, no Extended Validation (EV).Īs our certificate is expiring soon, we have renewed it. Smart-Screen filter still complains, despite I signed the executable, why?īut we are signing our software ( WinSCP) with DigiCert code signing certificate for years. The warning goes away only after the certificate builds a reputation: Windows Defender SmartScreen prevented an unrecognized app from starting I know that even a software signed with a new code signing certificate triggers Microsoft Defender SmartScreen warning:

Windows defender smartscreen whitelist