Getting security warning Unknown publisher issue while install the .exe or update the application using click once

Bharathiraja Kethappan 0 Reputation points
2024-12-12T15:24:46.37+00:00

Dear Support,

I have created a Windows application using WPF and deployed it to a server location using Click-Once. It was properly digitally signed and used by everyone in the organization. However, recently we have started getting the "Unknown Publisher" security warning and "Publisher can't be verified" message whenever a new version is published and users update to the latest version.

I checked the digital signature and confirmed that it has not expired. We haven't changed any configuration settings either. This warning issue has only started appearing recently.

I suspect this could be related to a recent Microsoft OS update, but I'm not sure.

I have tried all the recommended solutions available in various forums, and we have already followed them. Can anyone please provide guidance on how to resolve this issue?

Thanks,

Bharathi.

Windows Presentation Foundation
Windows Presentation Foundation
A part of the .NET Framework that provides a unified programming model for building line-of-business desktop applications on Windows.
2,806 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Hongrui Yu-MSFT 3,645 Reputation points Microsoft Vendor
    2024-12-13T03:36:46.4266667+00:00

    Hi,@Bharathiraja Kethappan. Welcome to Microsoft Q&A. 

    Open certmgr.msc (C:\Windows\System32), add your certificate in Trusted Root Certification Authorities->Certificates to make it a trusted certificate.

     Picture1

    A simple example: When publishing with ClickOnce, you create a certificate by Create test certificate

     Picture2

    The certificate will be stored in the Personal->Certificates location (you could confirm it by the creation time).

     

    At this point you could select it and paste it into Trusted Root Certification Authorities->Certificates by right clicking->Copy.

     

    Now you will not get the Unknown Publisher error when installing the application.

     

    Of course, there are other ways to add trusted certificates (commands, X509Store) that you could refer to:

    Add trusted publisher to client box (ClickOnce) - Visual Studio (Windows) | Microsoft Learn

    X509Store Class (System.Security.Cryptography.X509Certificates) | Microsoft Learn

     

    Finally, you should ensure that the certificate you update your application with is consistent with the locally stored trusted certificates.


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.