- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Signing FortiClient packages using EMS
Hello everybody,
I've been having difficulty installing FortiClient via EMS on Windows clients. I realized that a problem could be the Windows smartscreen.
Through EMS it is possible to import an ssl certificate to be able to sign FortiClient packages.
Through this procedure I created the certificate template, issued it and imported it on EMS:
Create a code signing cert for Windows Defender Application Control
I then tried installing the package on a client but the smartscreen continues to prevent the installation from starting until you hit run anyway.
The certificate chain is present on all Servers/Clients.
Could the problem be too narrow smart screen settings?
thanks in advance for your sharing.
ac
- Labels:
-
FortiClient
-
FortiClient EMS
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello ac,
Thank you for using the Community Forum.
I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.
Regards,
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Please note that EMS does not have any settings for Windows SmartScreen:
https://docs.fortinet.com/document/forticlient/7.0.7/ems-administration-
guide/278884/deployment-installers
For now, you can disable Windows SmartScreen only.
Windows SmartScreen settings in EMS would be a new feature request. Please contact Fortinet regional sales partner channel and make this feature request.
http://www.fortinet.com/partners/reseller_locator/locator.html
Or Fortinet Local Sale Engineer
http://www.fortinet.com/aboutus/locations.html
Kind regards
Chavdar Tanev
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The first error indicates that the application being installed is not signed, for this reason I issued and installed the ssl certificate to sign the FortiClient package.
I thought it would help, but we have noticed that the SmartScreen keeps crashing the installation reporting the same problem.
The next error states "Microsoft Defender SmartScreen prevented an unrecognized app from starting."