Windows can show Warning Messages during the installation process of GI.bench. This article describes what we have done and why it can happen anyways.
During the GI.bench installation, we sporadically receive a warning from Microsoft Defender
SmartScreen that GI.bench has not been recognized and may pose a risk.
With a so-called EV Code Signing Certificate from Sectigo, we wanted to counteract this message and this worked well for a while.
Now Microsoft has decided that this will no longer work for the Microsoft Defender SmartScreen.
Microsoft now requires a valid certificate (which we have purchased) plus a good reputation (which we can only influence to a limited extent) for the software to be classified as trustworthy.
A reputation improves if the following points are met:
▪ Download from a trustworthy site
▪ The name of the installer does not change often (problem with our EXE as it contains the
version and date -> GI.bench_Setup_64bit_V1.17.0.0_2025-04-30.exe)
▪ Software was scanned in the Microsoft Submission Portal
▪ many customers download the software
▪ many customers mark the software as trustworthy with “Run anyway” (customers could also block this)
This warning will probably occur again with every new GI.bench version and there is currently no reasonable solution to work around the problem.
What users should do:
If a warning appears, the installer can be started safely via “More information” → “Run anyway”.
Summary of the situation:
▪ The installer is properly signed with a valid EV Code Signing certificate from Sectigo.
▪ The SmartScreen reputation is independent of the certificate validity. Since August 2024,
Microsoft treats EV and OV certificates equally.
▪ New or rarely downloaded programs - even if they are signed - do not immediately have a
positive reputation and can therefore be blocked.
▪ The file has already been submitted for review via the official Microsoft portal.
▪ It can take 1-5 working days (or longer) to build up the reputation, depending on the
distribution and usage by end users.
▪ Unfortunately, there is no way to force SmartScreen to release immediately, even with an EV certificate