intuit / intuit/QuickBooks-V3-DotNET-SDK

SDK DLLs should be signed: IppDotNetSdkForQuickBooksApiV3.dll blocked by Windows Smart App Control

Open
#379 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C#
Stars
121
Forks
145
Avg merge
17h 1m
Merged PRs (30d)
1

Description

If I enable Smart App Control (in Windows 11 25H2), I'm unable to build my project that uses the .NET SDK. Smart App control pops up a message saying that IppDotNetSdkForQuickBooksApiV3.dll is blocked, and Visual Studio reports:

> Unknown build error, 'Could not load file or assembly 'file:///C:\Users\DHuang\.nuget\packages\ippdotnetsdkforquickbooksapiv3\14.7.1.5\lib\net472\IppDotNetSdkForQuickBooksApiV3.dll' or one of its dependencies. An Application Control policy has blocked this file. (Exception from HRESULT: 0x800711C7)'

If I check Windows Event Viewer, under Applications and Services -> Microsoft -> Windows -> CodeIntegrity -> Operations, I see this error logged:

> Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Microsoft Visual Studio\2022\Professional\MSBuild\Current\Bin\amd64\MSBuild.exe) attempted to load \Device\HarddiskVolume3\Users\DHuang\.nuget\packages\ippdotnetsdkforquickbooksapiv3\14.7.1.5\lib\net472\IppDotNetSdkForQuickBooksApiV3.dll that did not meet the Enterprise signing level requirements or violated code integrity policy (Policy ID:{0283ac0f-fff1-49ae-ada1-8a933130cad6}).

Users of our application also encounter the same error, so it's not just a problem during development.

I notice that none of the SDK DLLs have a digital signature. I think they should be signed in order to pass Smart App Control's checks.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the build or packaging entry point that produces IppDotNetSdkForQuickBooksApiV3.dll and the other SDK DLLs, then inspect how the NuGet package is assembled. Reproduce the Windows Smart App Control or Code Integrity failure described in the issue and verify the published DLLs have valid digital signatures and are no longer blocked.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
release, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.