Search code examples
windowsdigital-certificate

Windows report "Unknown publisher" of signed application


Windows 10 started reporting my application as "Unknown publisher" when I try to run it after a download.

enter image description here

However, after accepting the installation, it recognizes my company as a publisher:

enter image description here

The application is signed with a certificate from Comodo:

enter image description here

It is a very unpleasant situation. How to fix the problem?


Solution

  • Starting with January 1st, 2016 Microsoft is implementing a mandatory update of the Digital Signature system from SHA-1 to SHA-2 in order to deal with the decreasing security of the SHA-1 digital signatures.

    All applications signed with SHA-1 certificates will still be accepted until January 1st, 2017. The UAC prompt will still show the correct vendor information but the browser, i.e. Internet Explorer, will warn the users about an invalid signature. Also, the Windows SmartScreen will not recognize the SHA-1 signature and try to prevent the users from running it.