10 votes
Accepted

Transferring Microsoft SmartScreen reputation to renewed certificate

To complement the comment by @JozefIzso: The binary became trusted after about one month. While the further release become trusted after about 10 days only, third release did not become trusted for ...
Martin Prikryl's user avatar
3 votes

Transferring Microsoft SmartScreen reputation to renewed certificate

As you've figured out you can't transfer it, and you're stuck without using EV. Because you've got a new certificate, it took some time for your software to be verified as safe. What I think is ...
LTPCGO's user avatar
  • 1,035
3 votes

Are all fields of the PE certificate directory hashed during authenticode signing?

Nope. The entire certificate entry table is excluded from the Authenticode digest. The intuition for this is that, in the case of multiple certificates, the length and other metadata in the ...
yossarian's user avatar
  • 131
2 votes

Are all fields of the PE certificate directory hashed during authenticode signing?

I think most if not all of your questions can be answered by Microsoft's, Windows Authenticode Portable Executable Signature doc: http://download.microsoft.com/download/9/c/5/9c5b2167-8017-4bae-9fde-...
thepip3r's user avatar
  • 641
2 votes

Transferring Microsoft SmartScreen reputation to renewed certificate

This is an answer from Microsoft received in 2020: It seems the most important advice is to get the new code signing certificate before preivous expires. So the new one have time to gain reputation. ...
MaxSh's user avatar
  • 31
1 vote

Transferring Microsoft SmartScreen reputation to renewed certificate

We got our reputation back 3 days after updating our OV certificate. We offer software (TexturePacker, BabelEdit,...) since about 10 years. The code signing certificates we use are OV certificates ...
Andreas Löw's user avatar
1 vote

Can I sign with two Code Signing certs to build reputation on the newer one?

I am experimenting myself with 2 certs right now. To add a second code signing cert I use /as key of my signtool v8.1. I figured out that the order how you sing your EXE file with your certs leads to ...
MaxSh's user avatar
  • 31

Only top scored, non community-wiki answers of a minimum length are eligible