Can't Succesfully Sign Program

Question

I have tried signing a program with multiple methods. It says "A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider." I tried making the certificate with powershell and SelfCert.exe. When using Signtool I tried with different websites. When someone else downloads the program it says displays the Windows Defender SmartScreen. I am trying to make a safe program that is signed for other people to use. I would like to make it with a free digital signature. I'm not exactly sure what to do.

Command in Powershell I tried to make certificate: New-SelfSignedCertificate -Type Custom -Subject "CN=A & C Laboratories, O=A & C Software, C=US" -KeyUsage DigitalSignature -FriendlyName "A & C Laboratories" -CertStoreLocation "Cert:\CurrentUser\My" -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.3", "2.5.29.19={text}")

First Signtool command: SignTool sign /a http://rfc3161timestamp.globalsign.com/advanced /td SHA256 test.exe

Second Signtool command: SignTool sign /fd /a http://www.w3.org/2001/04/xmlenc#sha256 SHA256 test.exe

Answer 1

I understand, thank you for trying to help.

Answer 2

Sorry for not being able to solve your problem, I have no more knowledge regarding this, so I am going to release your question so that a colleague can help you in a better way.

Remember that the Microsoft community will always be there to help you.

Answer 3

Hi,

Yes I did what you recommended, thank you, but I would like to sign the program so other people won't see the screen.

Answer 4

Hello, I-m Betty, an independent advisor, it is my pleasure to help you today.

Try doing the following:

First tap on the Windows-key to display the Start menu, then type gpedit.msc and select the result, locate the computer configuration, Administrative Templates, Windows Components, File Explorer, double-click on the policy Configure Windows Defender SmartScreen, set it to Disabled and finally click on ok to save the change.

Another method if you are Windows 10 Home user:

First, Tap on the Windows key to open the Start menu and then type regedit.exe and select the result, you must confirm the UAC prompt. then go to HKEY_LOCAL_MACHINE \ SOFTWARE \ Policies \ Microsoft \ Windows \ System

And double-click on the value EnableSmartScreen, set the value to 0 to disable SmartScreen, to 1 to give users warnings, and to 2 to require admin approval. The default is 1.

Restart the PC after you made the change.

The Microsoft community is always there to help you.