Certificate Services Support

Issue :
Windows SmartScreen shows untrusted warning for Authenticode or Kernel Driver signed with SHA-1 Code Signing certificate.



Background:

On January 11th 2016, Microsoft released a new security patch 3123479. This security patch contains SHA-1 code sign deprecation change effective January 1, 2016, focused on client activity that can only occur when a customer downloads files from the Internet. This change is specific to a new default setting for Windows and customers can override or augment the default settings in their environment.

Microsoft Security Advisory 3123479

Several important points on this released patch :

1. Only the authenticode or kernel driver file that being signed and timestamped on January 1st 2016 and forward will be affected.

2. Authenticode and Driver that being signed and timestamped before January 1st 2016 will not be affected.

This advisory applies to the following operating systems:

[1]The Windows 10 update is cumulative. In addition to containing non-security updates, it also contains all of the security fixes for all of the Windows 10-affected vulnerabilities shipping with given month’s security release. The update is available via the Windows Update Catalog. See Microsoft Knowledge Base Article 3097617 for more information and download links.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance: 

Hours of Operation: 
Sunday 8:00 PM ET to Friday 8:00 PM ET 
North America (toll free): 1-866-267-9297 
Outside North America: 1-613-270-2680 (or see the list below) 
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.