Due to a breach in the security of the GlobalSign certificate used to confirm that FSUIPC is a valid and safe package, the certificate is being revoked. This will require ALL users of the software – whether registered or otherwise and using FSUIPC3 or FSUIPC4 – to need to download and install new versions.
Full details are available by clicking “Read more” below, or by visiting Pete Dowson’s post here on his support forum, here at simFlight. Download links are available at simFlight; here, or Schiratti.com; here. For a short time, the following direct links to FSUIPC3 (3.999z2) and FSUIPC4 (4.90) at Dropbox are also live.
Please note that this is not a security breach within FSUIPC itself – it is only the security certificate that has been compromised.
If you aren’t sure what FSUIPC is, or whether you have it, full details can be found on the product pages at simMarket and it can be found within your Flight Simulator 9/modules, Microsoft Flight Simulator X/modules or Prepar3D/modules folder. If you have a file entitled “FSUIPCx.dll” (x is dependant on the FS version) then you need to update, in order for FSUIPC to keep working.
Full Press Release text:
FSUIPC will need replacing on all user systems!
For the last ten years FSUIPC has been protected against both unwanted alteration and virus infection by the use of a Code Signature, purchased from and protected by GlobalSign, an officially recognised Windows Certificate Authority.
It has come to my attention that within the last two weeks the same Code Signature has been used to sign malicious software, apparently in the form of Java updates, to make it look valid and safe. Whilst the FSUIPC packages themselves are not affected in any way by these, it does mean that we have had to ask GlobalSign to revoke the signature. This in turn will cause the signature to appear incorrect, and because FSUIPC actively checks it every time it is started the end result is that all versions of FSUIPC3 and FSUIPC4 before today’s date will cease to function.
After due consideration it has been decided that we will dispense with Code Signing henceforth, and over the next few days unsigned versions of all of my programs will be released, replacing the signed versions and with incremented version numbers, but with no other changes.
Because only FSUIPC has the Signature self-checking built in, it is the main priority, and versions 4.90 and 3.999z2 have been released today free of this check. All users will need to update for continued use of the program, and software producers who include FSUIPC in their packages are asked to update those as soon as is convenient and practical.
Apologies to all for this unprecedented event. We still don’t know how the break in the signature’s security occurred but we will be following this up with GlobalSign.
Best Regards
Pete
![[Videoš¬] New Trailer 4K for Turkish Airports MSFS by SceneryTR Design – Istanbul – Ankara Trabzon by SIMMARKET](https://www.simflight.com/wp-content/uploads/2024/04/SceneryTR_thumb.jpg)
0 Responses
When will FSUIPC Version 3.85 cease functioning? If I install the new version will it still be registered to me, i.e. will all the features of my registered copy still work? This announcement is frightening and unclear. I don’t understand how or why my registered copy verifies itself online since I run my FS9 offline.
When GlobalSign rescind the certificate, David – it could be hours, it could be days. We don’t know, to be quite frank!
Your license is valid for all installations of that major version (FSUIPC3.anything in your case) so just install the new version over the top and you’ll lose nothing, nor notice any significant difference.
Pete is the best person to explain how the certificate is checked, so it would be best to ask that question directly on his forum.