TC 9.50 new installer certificate + Company work PC + Windows Defender

[Dworkin]

As it is mentioned at download page, TC 9.50 has new certificate for the installer.

But proposed solution to select "Run anyway" is not possible at my work computer due to corporate policy.

So my question: where and when can I can find information about updates of TC 9.50 certificates for the installer? What is happening with this topic at this moment?

---

https://www.ghisler.com/download.htm

============= IMPORTANT INFORMATION =============

We have a new certificate to sign the installer. However, Windows Defender may still show a warning about an unrecognized app.

You need to click on
More Info
and then
Run anyway
to install the new version.

============= IMPORTANT INFORMATION =============

 

[ghisler(Author)]

You can only wait until Windows Defender no longer flags this download as "rarely downloaded". If you are unlucky, this will never happen.

[Dworkin]

Any instructions how to proper make updates without installer?

[petermad]

Any instructions how to proper make updates without installer?

Just press Ctrl+PgDn on the installer package (fx tcmd950x64.exe) - then it is opened like any archive. You find all the program files in the subarchive INSTALL.CAB - then just overwrite your current installation of TC.

If your TC is installed in "C:\Program Files" - you might not have writing rights to TC's directory on your compagny computer - then just copy the files to a folder in your personal profile (cd %USERPROFILE%) and the run TC from there.

[cppguy16]

Right click, Properties, then check Unblock. Then it'll no longer warn you about the unknown installer.

https://stackoverflow.com/questions/48946680/how-to-avoid-the-windows-defender-smartscreen-prevented-an-unrecognized-app-fro

There are two types of certificates, standard and EV. EV certificates are more expensive, but go through more validation. When an application is singed with an EV certificate, Windows Defender won't show any warnings. But when a standard certificate is used, Windows doesn't trust it immediately. That's why many companies pay $500/year for code signing, and go through telephone verification. The phone number must be in an official yellow pages, the business must be registered, and they must contact the business owner by phone. That way Microsoft immediately trusts the release.

[Dalai]

That way Microsoft immediately trusts the release.

And it - and the CAs world-wide - make huge amounts of money off of a trust system that's essentially broken. Who vouched for the CAs? Nobody. Sorry for OT, but it's kind of true.

Regards
Dalai

[ghisler(Author)]

Our certificate has now been accepted by Windows Defender, please try to download and install again.

It took a bit more than 100'000 downloads.

I couldn't buy an EV certificate because one of the requirements was a listing in the yellow pages, which we didn't have because we don't accept any phone orders - such an antiquated requirement. In the meantime I had an entry added, but it seems that it will no longer be necessary.