Windows page: Smart App Control also blocks TeX Live's installer, and how the block shows itself (from dev 823558bfeab7)

doc/install/windows_source_install.md: with Smart App Control on, the MSYS2
installer never finishes, the MSYS2 shell does not open, and TeX Live cannot
be installed -- its installer brings an unsigned Perl. The paragraph quotes
both messages (the command line's and the Windows Security notice), and
Troubleshooting says to close the installer, switch Smart App Control off
and run it again. Found by performing the page on a pristine Windows 11.
This commit is contained in:
ack committed 2026-10-04 19:31:38 +02:00
1 parent bc2b3d8461
commit cc9407aab3
2 files changed
+12 -6

No files matched your search

+11 -5
View File
@@ -31,9 +31,13 @@ and the build a few minutes. Nothing here needs to be done twice.
**Smart App Control must be off.** A clean installation of Windows 11
runs Smart App Control, a security feature that blocks any program
Microsoft has not seen signed and widespread — and the MSYS2 compiler,
`make` and the `bash` shell on which this page depends are not signed, so
with it on the MSYS2 shell does not open and the build cannot start
("An Application Control policy has blocked this file"). Check it first:
`make` and the `bash` shell on which this page depends are not signed, nor
is the Perl that TeX Live's installer brings with it, so with it on the
MSYS2 installer never finishes, the MSYS2 shell does not open, the build
cannot start and TeX Live cannot be installed ("An Application Control
policy has blocked this file"; the notice from Windows Security says the
program "might not work because we can't confirm who published it").
Check it first:
Windows Security → **App & browser control** → **Smart App Control
settings**. It is in one of three states. *Off* is what you need. *On*
blocks MSYS2; switch it off. *Evaluation* lets everything run for now,
@@ -421,8 +425,10 @@ it (a new UCRT64 shell does, once the line is in `~/.bashrc`) and run
`MSYS2_PATH_TYPE` is not set to `inherit`, or the shell was opened before
you set it. Set it and open a new UCRT64 shell.
**"An Application Control policy has blocked this file", or the MSYS2
shell does not open.** Smart App Control is on; see *Before you start*.
**"An Application Control policy has blocked this file", the MSYS2
installer runs without ever finishing, or the MSYS2 shell does not open.**
Smart App Control is on; see *Before you start*. Close the installer,
switch Smart App Control off, and run the installer again.
It can turn itself on after the installation, in which case the
installation is intact and only the setting needs changing.