
If you have signed an executable that installs your application, why are you putting that executable (which is already compressed), inside of an archive? SmartScreen uses a variety of factors to determine if enough information about the file is known. What should i do ? Download the EXE file direct, instead of the ZIP ?īUT still, when the user try to download the install file in ZIP format from our website using Edge, Smartscreen still shows that infamous message The ZIP file isn't signed because you can't sign ZIP files, but the install.exe file inside of the ZIP is. I bought the EV code sign certificate just to avoid that, but anything changed in the download process.


That's A LOT of friction to install a simple application on the machine. Then the user needs to click on menu, then click on 'Keep', then another windows is show, then the user needs to click on Show more, then click again on 'Keep anyway'. Make sure you trust xxxx.zip before you open it". Now when i sign my installation file, Smartscreen really doesn't bother the user anymore and will let the app be installed.īUT still, when the user try to download the install file in ZIP format from our website using Edge, Smartscreen still shows that infamous message : "xxxx.zip isn't commonly downloaded. It can also be configured under Computer Configuration > Administrative Templates > Windows Components > Windows Defender SmartScreen > Microsoft Edge.In order to avoid SmartScreen blocking downloads and install files from my application, i bought an EV Code Signing Certificate ,which is expensive. Windows 10 includes duplicate policies for this setting. Registry Path: \SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter\Ĭonfigure the policy value for Computer Configuration > Administrative Templates > Windows Components > Microsoft Edge > "Configure Windows Defender SmartScreen" to "Enabled". If the following registry value does not exist or is not configured as specified, this is a finding.


Windows 10 LTSC\B versions do not include Microsoft Edge, this is NA for those systems. This is applicable to unclassified systems, for other systems this is NA. Windows 10 Security Technical Implementation Guideĭetails Check Text ( C-22559r555017_chk ) The Windows Defender SmartScreen filter in Microsoft Edge provides warning messages and blocks potentially malicious websites.
