The error "This app has been blocked for your protection" appears when previewing or restoring records from NuGenesis SDMS - WKB269082

SYMPTOMS

• The following message appears when previewing print records or restoring file records:
  • This app has been blocked for your protection.
  • An administrator has blocked you from running this app. For more information, contact the administrator.
  • NGipvw.exe
  • Publisher: Unknown
  • File origin: File on this computer
  • Program location: "Drive:\Program Files (x86)\Waters\NGSDMS\UV\NGipvw.exe"
• In the case of CyberArk EPM, no message is seen on screen; the NGX file is downloaded from the Web server but the NuGenesis Transfer App does not appear

ENVIRONMENT

• NuGenesis 9.1 SDMS
• NuGenesis 9.2 SDMS (Empower LMS)
• User Access Control (UAC) is set to High on one or more client PCs or Citrix servers
• Or, CyberArk EPM is installed on the host and is configured to block program execution for programs that have expired/revoked code-signing certificates

CAUSE

The program was signed by Waters with a code-signing certificate issued by Thawte, a third-party certificate authority. Thawte has revoked their root certificate, and, as a result, UAC cannot verify the authenticity of the code-signing certificate in NGipvw.exe. UAC therefore does not allow the program to run.

FIX or WORKAROUND

• Install a re-signed copy of NGipvw.exe:
  • NuGenesis 9.1:
    1. Download the NuGenesis_9_1_0_7_re-signed.zip file from this article.
    2. Rename Drive:\Program Files (x86)\Waters\NGSDMS\UV\NGipvw.exe to NGipvw.exe.91.
    3. Copy the NGipvw.exe file from the zip file into Drive:\Program Files (x86)\Waters\NGSDMS\UV.
• Or, lower the UAC security level to Medium or Low.

ADDITIONAL INFORMATION

NuGenesis 9.3 is not affected by this issue because the code-signing certificates used in that version were issued by a different CA and are not revoked. NuGenesis 9.0 and prior versions are not affected because NGipvw.exe was not code-signed in those versions.