Signing FortiClient packages using EMS

[ac1]

Hello everybody,

I've been having difficulty installing FortiClient via EMS on Windows clients. I realized that a problem could be the Windows smartscreen.

Through EMS it is possible to import an ssl certificate to be able to sign FortiClient packages.

Through this procedure I created the certificate template, issued it and imported it on EMS:

Create a code signing cert for Windows Defender Application Control

I then tried installing the package on a client but the smartscreen continues to prevent the installation from starting until you hit run anyway.

The certificate chain is present on all Servers/Clients.

Could the problem be too narrow smart screen settings?

thanks in advance for your sharing.

ac

[Anthony_E]

Hello ac,

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Regards,

[ctanev1]

Hi,

Please note that EMS does not have any settings for Windows SmartScreen:

https://docs.fortinet.com/document/forticlient/7.0.7/ems-administration-

guide/278884/deployment-installers

For now, you can disable Windows SmartScreen only.

Windows SmartScreen settings in EMS would be a new feature request. Please contact Fortinet regional sales partner channel and make this feature request.

http://www.fortinet.com/partners/reseller_locator/locator.html

Or Fortinet Local Sale Engineer

http://www.fortinet.com/aboutus/locations.html

Kind regards

Chavdar Tanev

[ac1]

The first error indicates that the application being installed is not signed, for this reason I issued and installed the ssl certificate to sign the FortiClient package.

I thought it would help, but we have noticed that the SmartScreen keeps crashing the installation reporting the same problem.

The next error states "Microsoft Defender SmartScreen prevented an unrecognized app from starting."