Please help getting our new certificate approved!

[ghisler(Author)]

This is a request for help to everyone who is NOT participating in the beta test, or has not downloaded the new installer yet:

We have a new certificate for our company "Ghisler Software GmbH" to sign our programs. Unfortunately Windows Defender always takes a very long time to flag this certificate as good. Until this happens, users get an ugly warning that the program is unrecognized and potentially dangerous.

To help us get the certificate approved, please do the following:

1. Go to https://www.ghisler.com/950_beta.htm
2. Click on "Combined web installer via https"
3. Run the installer
4. Click on "More Info" and then "Run anyway"
-> the new installer should start
5. Abort the installation

[Wilhelm M.]

Wanted to help, but something unexpected happened. At step 2 I am asked to either Save the file or Cancel the download. So I klick Save, then start the installer from the harddisk. The installer is started right away without displaing "More Info" and then "Run anyway". Then I abort the installation. Now I'm asking myself: Is that it?

Addition... I had forgotten that on my system the UAC is reduced to a minimum (to be honest, it's reduced to zero ). Now I have increased the UAC level. But that made no difference.

[Stefan2]

This is a request for help to everyone who is NOT participating in the beta test, or has not downloaded the new installer yet:

Unfortunately Windows Defender ....

Me think this is for people who
a - use Windows Defender (which would show that "More Info" and then "Run anyway")
b - have not clicked on "Combined web installer via https" or executed "totalcmdbetainst.exe" yet in the past



So I am out.


 

[ghisler(Author)]

The problem only occurs with the new "totalcmdbetainst.exe" for beta 6. The older versions were still signed with our old certificate, which has unfortunately expired. The new one is valid for 3 years, so once it has been approved, there wont be any problems for 3 years.

2Wilhelm M.
Are you using Windows 7? I didn't get these Windows Defender warnings on it.

[Usher]

Microsoft mentioned that in some cases new certificates should use SHA-2:
https://support.microsoft.com/en-us/help/4472027/2019-sha-2-code-signing-support-requirement-for-windows-and-wsus
Dual signed (SHA-1/SHA-2) signatures are probably a good solution, I suppose.

[petermad]

then start the installer from the harddisk. The installer is started right away without displaing "More Info" and then "Run anyway".

Same here.

I haven't run totalcmdbetainst.exe before on the test computer.

[Wilhelm M.]

Sorry if I caused some confusion. I think Stefan is right - it is only related to Windows Defender. Which I do not use.

@Christian Ghisler - Yes, I use Windows 7 32-bit here, but that seems not to matter (see above).

[petermad]

it is only related to Windows Defender. Which I do not use.

But I use Defender, and I don't get any "More Info" alerts or anything - the installer just starts

[ghisler(Author)]

Microsoft mentioned that in some cases new certificates should use SHA-2:

It's dual signed with SHA1 and SHA2, just like with the previous certificate. However, we use Digicert now and not Symatec (they sold their cert business to Digicert).

But I use Defender, and I don't get any "More Info" alerts or anything - the installer just starts

I still get the warning here on Windows 10. You don't write on which version you tested it, your header mentions Windows XP, 7, 8.1, and 10.

[petermad]

You don't write on which version you tested it, your header mentions Windows XP, 7, 8.1, and 10.

Oh, Sorry - I tried on Windows 10 1909 and Windows 7. I have standard setting for UAC. I am testing from admin accounts.

Only Windows 8.1 and 10 comes with Windows Defender, on Windows 7 it is called Microsoft Security Essentials.

Microsoft Security Essentials can no longer be installed on Windows XP.

[ghisler(Author)]

I'm still getting the warning on multiple Windows 10 PCs...

[rmmaniac]

can I exclude tc folders from Windows Defender

[ghisler(Author)]

No, that doesn't help in this particular case.

[Phred]

How's the need for our doing this, in October 2020?

[ghisler(Author)]

Thanks for the reminder, it's no longer necessary. I will change the thread to normal priority.