install4j 更新 JRE 而不生成新的安装程序

Question

We use installer with embedded JRE. To update JRE we generate new installer and use auto-update feature. But antiviruses (Windows Defender,..) warn user that it is new file which was downloaded only few times. How to update JRE without creating new installer to avoid antivirus warnings.

Answer 1

This is a warning related to the code signing certificate that you are using, not to the particular file. After users from a sufficiently large number of IP addresses have downloaded executables signed with this certificate, the warning will no longer be displayed.

The only way around this is to use an extended code signing certificate which is immediately trusted by the Windows SmartScreen filter.