Using EXE installer os MS Store

[omar reis]

I'm trying to use a Inno setup generated EXE installer on the MS Store.

It needs to be a silent installer.

I tried /SILENT and /VERYSILENT but both didn't pass the 'Silence' test.
I wonder if my setup is doing something not allowed...

Omar

[Eivind Bakkestuen]

How did it not pass the test?

I wonder if you forgot to tell us something... :P

--
You received this message because you are subscribed to the Google Groups "innosetup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to innosetup+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/innosetup/ed57c849-b205-40c1-8e82-ef725fb04804n%40googlegroups.com.

[omar reis]

Eivind

Thanks for the answer. I just noticed I have to sign all binaries

(program and installer). Maybe this is the problem...

I wonder if a plain authenticode certificate will do

or I have to pay a EV certificate ?

( if this is even the issue with my installer )

Omar

[Jernej Simončič]

On Sunday, July 9, 2023, 16:14:05, omar reis wrote:

Thanks for the answer. I just noticed I have to sign all binaries

(program and installer). Maybe this is the problem...

This shouldn't be related. Have you tested your installer with /VERYSILENT switch?

 

I wonder if a plain authenticode certificate will do

or I have to pay a EV certificate ?

( if this is even the issue with my installer )

Plain authenticode certificate is fine.

-- 
< Jernej Simončič ><><><><>< https://eternallybored.org/ >

If the shoe fits, it's ugly.
       -- Gold's Law

[omar reis]

update Aug/23:   Got an Authenticode EV Certificate. Signed the program and installer EXE.

Set MS Store package test to run with /VERYSILENT parameter.
(Also tested with /SILENT).  None of these worked for me.

It seems Windows Defender SmartScreen is blocking the execution,

not clear what is the cause ( no error message was provided )

It seems the warning dialog that SmartScreen shows 

violates the silence test.

Or maybe it is something else my installer is doing...

I wonder if other people succeeded publishing innosetup installers on MS Store..

thanks
Omar

[omar reis]

I finally managed to get my app published on MS Store, with a Inno Setup EXE installer.
Key points:
1- Get an EV Authenticode certificate ( must be a company certificate ) and sign the program and the installer w/ SignTool.
2- Place the installer on your webserver on a https URL. The URL is immutable and file must not be changed after.
3- Submit your app to Windows Defender SmartScreen ( Windows anti-virus, took 1 week to get it approved )
4- Set the package to install with /VERYSILENT parameter (silent installer)

[Jernej Simončič]

On Monday, August 28, 2023, 13:01:04, omar reis wrote:

1- Get an EV Authenticode certificate ( must be a company certificate ) and sign the program and the installer w/ SignTool.

We use a non-EV certificate for GIMP.

 

2- Place the installer on your webserver on a https URL. The URL is immutable and file must not be changed after.

Here we did have some problems, because the download link redirects to a random mirror, though we were able to resolve this with Microsoft's help.

-- 
< Jernej Simončič ><><><><>< https://eternallybored.org/ >

People will believe anything if you whisper it.
       -- The Whispered Rule

[omar reis]

   > We use a non-EV certificate for GIMP.

Thanks Jernej for clearing this. I will fix my notes:

https://github.com/omarreis/vsop2013/blob/master/PublishInnoSetupOnMSStore.md

[Chris Ford]

I wonder if someone would start a business of doing this as a service?

[Chris Ford]

Can this certificate be used again or is this a one cert to .exe use?

I am trying to find out how much this cert cost.

* Is this a code signing cert

$64.00 is the lowest with $129.00 and as high as $1,299.00 (Microsoft)

All of this to make the windows pretender recognize the build?

On Monday, August 28, 2023 at 6:01:04 AM UTC-5 omar reis wrote:

[Eivind Bakkestuen]

A code signing certificate can be used to sign as many executables as you wish. At the very minimum, you sign your your application, the installer, and uninstaller.

--

You received this message because you are subscribed to the Google Groups "innosetup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to innosetup+...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/innosetup/ab4da88f-2c3b-45ff-92c9-5cea9784893en%40googlegroups.com.

[Omar Reis]

The certificate can be used to sign multiple files, during the period of validity.

The certification system protects the user and developer against

unauthorized changes in a published installer ( may be to install unwanted or malicious code)

So, all security measures are required. Large and secure passwords. Keep it safe.

EV certificates offer 2 factor authentication, and seems to be the way to the future. But the certificate is more expensive.

Regular nov-EV certificates work too.  For now.

regards

omar

---

De: inno...@googlegroups.com <inno...@googlegroups.com> em nome de Chris Ford <pbbs...@gmail.com>
Enviado: quinta-feira, 31 de agosto de 2023 02:05
Para: innosetup <inno...@googlegroups.com>
Assunto: Re: Using EXE installer os MS Store

 

--
You received this message because you are subscribed to a topic in the Google Groups "innosetup" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/innosetup/f2-s8egy4s0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to innosetup+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/innosetup/ab4da88f-2c3b-45ff-92c9-5cea9784893en%40googlegroups.com.

[omar reis]

notes:  https://github.com/omarreis/vsop2013/blob/master/PublishInnoSetupOnMSStore.md