Opened 7 years ago

Closed 2 years ago

#4829 closed defect (fixed)

Windows installers fail SmartScreen checks

Reported by: Francesco Casella Owned by: Adeel Asghar
Priority: blocker Milestone: 1.20.0
Component: Installation program Version:
Keywords: Cc:

Description

When installing OMC on Windows, the SmartScreen filter identifies the OMC installer as suspicious software from unidentified authors, and requires to give explicit consent to perform a potentially dangerous installation.

This may be ok for hardened hackers that know about the OSMC, but it's not projecting an image of quality and dependability on the sofware, particularly for industrial and corporate use. Looking like potential malware is not a very good marketing strategy :)

I would recommend that from 1.13.0 we start signing the installer with a certificate, so that we avoid this kind of problems. More information on how to do this is found here

Change History (8)

comment:1 by Martin Sjölund, 7 years ago

We have signed the Linux installers for a long time. Yes, we should do it for Windows as well...

comment:2 by Francesco Casella, 6 years ago

Milestone: 1.13.01.14.0

Rescheduled to 1.14.0

comment:3 by Francesco Casella, 5 years ago

Milestone: 1.14.02.0.0

comment:4 by Adeel Asghar, 5 years ago

Since there is already some work done on #4504. I think is time now we should consider this ticket as well. As a first step we need to purchase the digital certificate. Few options for buying certificate are sectigo and digicert.

Note that we should purchase an EV certificate.

comment:5 by Adrian Pop, 5 years ago

@adeas31, I think we can self sign the installer for now until we buy one of these. We need some bureaucracy for this (and therefore Peter), we had it before for the openmodelica.org server from StartSSL which is now gone.

comment:6 by Andreas Heuermann, 4 years ago

Having this for version 1.16.0 would be great.
In my opinion publishing a version for Windows that is blocked by SmartScreen leaves no good impression for first-time users.

@casella How important is this in your opinion? Do you want to leave it for 2.0.0?

comment:7 by Francesco Casella, 3 years ago

Let's continue the discussion on the GitHub ticket #4829

comment:8 by Francesco Casella, 2 years ago

Milestone: 2.0.01.20.0
Resolution: fixed
Status: newclosed

Fixed for all versions, which are now signed with an appropriate certificate.

Note: See TracTickets for help on using tickets.