We got our reputation update for the updated OV certificate in 2reputation back 3 days after updating our OV certificate.
We offer software (TexturePacker, BabelEdit,...) since about 10 years. The code signing certificates we use are OV certificates with the duration of 3 years.
With the last TexturePacker release with the updated certificate on 2023-02-02, we got hit by the reputation issue.
What we've done to get the reputation back:
- Uploaded TexturePacker to our page - also enabled it in our auto updater. But we did not present it on the page to prevent confusion for new users.
- Opened the download in Edge. Edge warns and you can select an option to tell Microsoft that this is a false positive
- Fill the form at Microsoft, describing that this is a certificate update and that you are the owner of the software.
- Wait 2-3 days (it was over a weekend - maybe it's even faster on working days)
- Receive an email that SmartScreen is updated
We've enabled the regular download and everything is ok. No smart screen warning.
We've also tested uploading a nightly build of BabelEdit signed with the new certificate. That was fine, too.
So it seems that Microsoft accepted the new certificate.