SmartScreen "unrecognized app" warning persists on files signed with Azure Artifact Signing, no malware/PUA detection

Question

SmartScreen "unrecognized app" warning persists on files signed with Azure Artifact Signing, no malware/PUA detection

Mateo Rodriguez 0

We are distributing a Windows desktop application (Electron-based, business software) signed with Azure Artifact Signing.

The signature validates correctly: the correct publisher name displays during installation. However, Windows SmartScreen still shows "Windows protected your PC / unrecognized app" for all users on install, with no exceptions so far.

What we've verified:

No malware or PUA detection from Windows Defender Antivirus at any point (checked Protection history, nothing listed)
Certificate chain validates correctly
Distribution is direct from our own domain via a stable CDN link, no redirects, same URL across releases
Every release has been signed consistently with the same Artifact Signing identity

What we're asking:

Is there a different or additional reputation-building process specific to Artifact Signing identities compared to traditional OV certificates, or does it follow the same hash/publisher reputation model described in the general SmartScreen documentation?
Is there any expected timeline or install-volume threshold specific to Artifact Signing signatures that differs from what's documented for standard code signing certificates?
We attempted to open a technical support ticket through Azure Support (Developer plan active) under Artifact Signing, but the flow only offers "Prioritized support on Microsoft Q&A" with no path to a formal ticket. Is Artifact Signing currently excluded from paid Azure support plan coverage, or are we missing a step?

Happy to provide the certificate thumbprint or resource details via private message if that helps with investigation.

0 comentarios

1 respuesta

Su respuesta

Answer 1

Hola

Bienvenido/a a la comunidad de Microsoft Azure

Buenas noches. Gracias por contactarnos y por detallar su caso. La firma digital con Azure Trusted Signing confirma la autenticidad de la aplicación, pero no otorga reputación automática en Defender Smart Screen. Esta función se implementa gradualmente en función de varias señales; no existe documentación de Microsoft al respecto, ni plazos ni requisitos de instalación. En cuanto al soporte, si el portal de Azure le dirige a esta plataforma, este es el canal disponible actualmente para esta función según su plan contratado.

Documentación técnica de referencia recomendada.:

¡Mucha suerte! Háganos saber el resultado.

Si la respuesta le ayudó a resolver su problema o pregunta, márquela como Respuesta útil. Esto cierra el tema, marca la solución correcta y ayuda a otras personas con la misma pregunta a encontrar la respuesta más fácilmente. Si aún necesita soporte o tiene nuevas preguntas, puede usar esta misma publicación.