Question on signing

Question

Hi,

I was signing my sensor driver (UMDF) with a Verisign Class 3 Code Signing Cert in order to get rid of the "This driver is unsigned..." warning on install. Instead I've now a question box from Windows Security, asking me, whether I want to install the driver. For me this means, I have successfully expelled the Devil with the Beelzebub... for just $500 per year :) Even more worse: In the properties dialog the driver is still marked as NOT digitally signed...

Two questions on this:

1) Is it possible to achieve a "silent" install with devcon, getting rid of any security warning/message?

2) What are the required steps to get a digitally signed driver, which installs w/o complains and is treated as signed?

Kind regards

---

neil

Answer 1

I think that drivers have to be signed by MS. Any other root certificate, even if in the trust list, is not trusted for drivers, either UMDF or KMDF.

---

Michael

Answer 2

Michael is correct; in order to properly sign your driver, it must be submitted to the WHQL program for verification.  You can get more information on that here:

http://www.microsoft.com/whdc/winlogo/default.mspx

Dan

Answer 3

Hmm. Thanks for the answers.

My driver is neighter a hardware driver, nor is operating in kernel mode. Do I really have to go through WHQL? 

Regards

---

neil

Answer 4

Yes.

---

Michael

Answer 5

;) Thanks.

---

neil