I want to sign an Exe (msi) or MSIX setup file to run on all systems without any problems (like smart screen). I used InstallShield and Advanced Installer for creating setup Both of these applications can be signed by the PFX file However, the user must manually install the signature before executing the setup file So how can I sign a setup file that runs on all systems without any problems and does not require the user to install a signature?
The solution for you is to purchase and use a digital signature certificate (of Microsoft Authenticode type) issued by a certificate vendor that is a trusted authority within the default Windows system trusted authorities list. A certificate issued by any of the most known certificate vendors should be enough to fulfill your request.
Once you purchase such a certificate file you can simply configure and use it in "Digital Signatures" section of your Advanced Installer or ISH setup project.