Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,695 questions
How to install certificate automatically on user machine?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(121.6, 74%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3E3T%3C/text%3E%3C/svg%3E)
365 timviec
45
Reputation points
I'm a .NET developer and am having issues with Windows security. Every time a user clicks on my app, Windows shows a warning and forces them to choose.
This is very annoying and feels unsafe. After searching the Internet, I tried installing the certificate on my personal computer and the warning disappeared. So I thought if it was possible to install the certificate automatically on the client machine, it would solve the above problem. If there is a solution please comment below. Thank you.
{count} vote
-
Andreas Hartig 121 Reputation points2023-03-28T08:57:45.37+00:00 Hi Timviec,
you will need a certificate that is accepted as trustworthy on all clients you want to manage and deploy this certificate. There are multiple ways to achieve this.
Deploy a certificate for an application signature, you typically need to follow these steps:
- Obtain a certificate from a trusted certificate authority (CA): You can purchase a certificate from a trusted CA such as DigiCert, Symantec, or Comodo. The certificate will contain a public key that is used to verify the signature of your application.
- Generate a private key: You need a private key to sign your application. You can generate a private key using a tool like OpenSSL or Keytool.
- Create a signing request: You need to create a signing request that contains information about your organization and the public key that you obtained from the CA.
- Submit the signing request to the CA: You need to submit the signing request to the CA and follow their instructions to verify your identity and obtain the signed certificate.
- Install the certificate and private key: Once you receive the signed certificate from the CA, you need to install it along with the private key on the machine that you will be using to sign your application.
- Sign your application: You can use a tool like SignTool or jarsigner to sign your application using the certificate and private key.
- Distribute your signed application: Once your application is signed, you can distribute it to your users.
This can also be done if you have access to the PKI of your organization and i.e. Group Policies to deploy this certificate to all clients.
Details for this can be found here: https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/distribute-certificates-to-client-computers-by-using-group-policy
-
365 timviec 45 Reputation points
2023-03-29T01:27:11.27+00:00 I already have a certificate like in the picture and i want when the user use my app the certificate will be automatically added to their machine.
This helps my application bypass the Windows warning screen.
I would like to ask about the solution of doing this. Thank you.
Sign in to comment
1 answer
Sort by: Most helpful
-
Deleted
This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Comments have been turned off. Learn more