https://bugs.kde.org/show_bug.cgi?id=528082
Bug ID: 528082
Summary: Windows 11 26H2 blocks the launching of digiKam—or
certain DLL files—via the "Smart App Control"
Classification: Applications
Product: digikam
Version First 9.1.0
Reported In:
Platform: Other
OS: Other
Status: REPORTED
Severity: normal
Priority: NOR
Component: general
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
Hi
Windows 11 26H2 blocks the launching of digiKam—or certain DLL files—via the
"Smart App Control" feature, because Microsoft requires a digital signature.
The software runs once "Smart App Control" is disabled, but doing so removes
protection against other potentially malicious software.
Why not create a self-signed private certificate? Up until now, this approach
has successfully resolved a similar blocking issue for a 32-bit program
developed in "Visual Basic 6 Pro" back in 1999, which lacked a signature from
Microsoft.
The following manual procedure is quite difficult for an average user; could it
be automated via a script for Digikam ?
Note: Check whether it should be "CN=Digikam developers team"…
Example :
Step 1: Create the "Digikam developers team" signing certificate using
PowerShell
- Open a PowerShell window as an administrator by pressing the [Win] + X
+ A key combination.
- Copy the following command (the 3 lines constitute a single command)
and execute it in PowerShell:
New-SelfSignedCertificate -Type CodeSigningCert
-Subject "CN=Digikam developers team" -CertStoreLocation Cert:\CurrentUser\My
-NotAfter (Get-Date).AddYears(10)
- You will then receive a "Thumbprint" number:
Step 2: Install the "Digikam" certificate into the Trusted Root Certification
Authorities store
For Windows 11 to accept this self-signed certificate, you must move it from
your personal store to the "Trusted Root Certification Authorities" store.
Still within the administrator PowerShell window, run the following 5 lines of
commands. Replace "THUMBPRINT" with the number obtained in Step 1:
Line 1:
$cert = Get-Item Cert:\CurrentUser\My\THUMBPRINT
Line 2:
$store = New-Object
System.Security.Cryptography.X509Certificates.X509Store("Root", "LocalMachine")
Line 3:
$store.Open("ReadWrite")
Line 4:
$store.Add($cert)
Line 5:
$store.Close()
Verification:
- Open the system tool `certlm.msc` by pressing the [Win] + R key
combination.
- Navigate to "Trusted Root Certification Authorities" > "Certificates".
The "Digikam" certificate must be located at the end:
- Launch the "Digikam" program.
Best regards
--
You are receiving this mail because:
You are watching all bug changes.
