none
driver signing win7 64 bits RRS feed

  • Question

  • hello,

    we are need sign a driver to able use it on win7 64 bits.

    this driver for custom hardware for our customer, this driver will not used for public distribution, so we are don't interested in complex whql certification. our customers ok about warning dialogs on installation process.

    as described this page http://msdn.microsoft.com/en-us/library/windows/hardware/ff552289%28v=vs.85%29.aspx we are have a option to use Software Publisher Certificate (SPC).

    my question is:

    what kind certificates we are need?

    where we are may buy certificates to sure for 146% we able sign drivers?

    do we are need to submit our drivers for inspection etc?

    is there any simple tutorial where described we are should click and enter our credit card to get magic and at last get our signed drivers?

    alex

    Thursday, June 5, 2014 9:43 AM

Answers

  • There are a number of certificate providers see http://msdn.microsoft.com/en-us/library/windows/hardware/dn170454(v=vs.85).aspx   If you check their websites you will see a listing for Code Signing and perhaps Microsoft Authenticode, this is the certificate you need. 

    You don't need to have your drivers inspected, there is another level of driver signing for WHQL, but that is not what you are looking for.   The procedure for is fairly simple, but does depend on whether you are using a Visual Studio based WDK or an earlier WDK.


    Don Burn Windows Filesystem and Driver Consulting Website: http://www.windrvr.com Blog: http://msmvps.com/blogs/WinDrvr

    Thursday, June 5, 2014 10:07 AM

All replies

  • There are a number of certificate providers see http://msdn.microsoft.com/en-us/library/windows/hardware/dn170454(v=vs.85).aspx   If you check their websites you will see a listing for Code Signing and perhaps Microsoft Authenticode, this is the certificate you need. 

    You don't need to have your drivers inspected, there is another level of driver signing for WHQL, but that is not what you are looking for.   The procedure for is fairly simple, but does depend on whether you are using a Visual Studio based WDK or an earlier WDK.


    Don Burn Windows Filesystem and Driver Consulting Website: http://www.windrvr.com Blog: http://msmvps.com/blogs/WinDrvr

    Thursday, June 5, 2014 10:07 AM
  • thanx for reply!

    we are planning to buy DigiCert certificate as it is cheapest one.they are have "Code Signing Certificate" and "EV Code Signing Certificate", so we are should by  "Code Signing Certificate", is it correct?

    do we need to buy any certificates from MS or using cross-certificates enough?

    we are using usb IC with maker driver, we are just changed inf file and some customization, so we are did not used any WDKs to develop drivers. but for signing we are planning to use tools from latest WDK.

    we are would very appreciate if you can confirm or comment following steps:

    1. buy from DigiCert "Code Signing Certificate" with "Microsoft Authenticode" format, nor "Microsoft kernel-mode code".

    2. download MS DigiCert Assured ID Root CA

    3. use tools from latest WDK to make cat file and sign it with DigiCert + cross

    4. profit :)

    alex.


    • Edited by m_fox2k Friday, June 6, 2014 1:57 AM
    Friday, June 6, 2014 1:55 AM