Sublime Forum

What is Nitrokey?

#1

I just updated from 4152 to 4166 on Windows 10 x64. During the update I noticed that the UAC prompt for the file “Sublime Text Update Installer.exe” was titled “Nitrokey”. I already pressed Yes before I caught a glimpse of this and it gave me a bit of panic. Looking further into this and installing a fresh 4152 in a VM and doing the update, this time the UAC prompt was titled “Sublime Text Update Installer.exe”. There are two different updaters, that as far as I can tell only differ by file signature and signature date. The two installs of 4152 are also different and have “Nitrokey” signature for the executables. After updating to 4166, the two installs seem to be identical beside the uninstaller files.

What is going on here and why are there two different updaters?

0 Likes
#2

Build 4152 uses a new code signing key as our old one expired. Due to new requirements from Microsoft this meant we needed to get a hardware security module, which we bought from Nitrokey. Due to a misconfiguration we signed all the executables for build 4152 with the name “Nitrokey”. This was quickly fixed and 4152 was amended, but if you updated early you got the wrong name.

TLDR: We misconfigured build 4152, hence the incorrect name.

1 Like