Can I obtain a certificate from Microsoft directly?
in [Device Drivers]
|
Prev: Error Code 52 On Signed 64-Bit Kernel Driver - More Signing Ne
Next: To clone a Network Adapter record (WinXP+)
From: Tim Roberts on 3 Apr 2010 23:41 Naganuma Tatsumi <NaganumaTatsumi(a)discussions.microsoft.com> wrote: > >I will obtain a certificate from a third-party certificate authority. Be careful! You can't just pick any certificate authority. It has to be one that's on the very short list where Microsoft has a valid "cross certificate". Check this list: http://www.microsoft.com/whdc/winlogo/drvsign/crosscert.mspx -- Tim Roberts, timr(a)probo.com Providenza & Boekelheide, Inc.
From: Jonathan Wilson on 4 Apr 2010 04:34 I could have sworn that there was some part of kernel mode code signing where only a VeriSign certificate was acceptable. Or has that changed?
From: Don Burn on 4 Apr 2010 09:16 A verisign certificate is needed to sign in to WHQL. Verisign has a cheap cert for this, or a more expensive one that allows both signing into WHQL and code signing a driver. Other vendors offer code signing only certificates. Don Burn (MVP, Windows DKD) Windows Filesystem and Driver Consulting Website: http://www.windrvr.com Blog: http://msmvps.com/blogs/WinDrvr > -----Original Message----- > From: Jonathan Wilson [mailto:jfwfreo(a)tpgi.com.au] > Posted At: Sunday, April 04, 2010 4:34 AM > Posted To: microsoft.public.development.device.drivers > Conversation: Can I obtain a certificate from Microsoft directly? > Subject: Re: Can I obtain a certificate from Microsoft directly? > > I could have sworn that there was some part of kernel mode code signing where > only a VeriSign certificate was acceptable. Or has that changed? > > > __________ Information from ESET Smart Security, version of virus signature > database 4998 (20100404) __________ > > The message was checked by ESET Smart Security. > > http://www.eset.com >
From: Naganuma Tatsumi on 5 Apr 2010 04:16
"Tim Roberts" wrote: > Be careful! You can't just pick any certificate authority. It has to be > one that's on the very short list where Microsoft has a valid "cross > certificate". Check this list: > > http://www.microsoft.com/whdc/winlogo/drvsign/crosscert.mspx Thank you. I will confirm to CA the certificate is supported to sign the kernel-mode driver, before I decide to buy the certificate. |