Signed driver package rejected by Win 7 RC, Why?
in [Device Drivers]
|
Prev: How to set Connection Timeout and KeepAlive Timeout value in WSK client driver
Next: Manually editing INF file for flakey soundcard
From: John Bond on 23 Oct 2009 12:36 I thought it would be nice to test my 64-bit KMDF 1.7 driver on Win 7 Ultimate RC... well even with a digital certificate used to sign the driver package, it is rejected with the following message: A recently installed program tried to install an unsigned driver. This version of Windows requires all drivers to have a valid digital signature. The driver is unavailable and ... (I get the message) So what must I do to bypass this and test my driver? Must I go back to Server2008? -- Mr. Fixit needs your help! - John Bond , LLC
From: David Craig on 23 Oct 2009 14:57 Look on Microsoft.com for a cross signing certificate that matches your corporate certificate. There are procedures documented in WHQL for driver and cat file signing. It is fairly easy to do once you have the correct certs, but since someone else provides those to us I have never done it myself. Once the certs are done and you have added the private key to your computer it is just a matter of running inf2cat and signtool on the sys and inf. "John Bond" <johnbond(a)newsgroup.nospam> wrote in message news:0785368D-EAE6-4496-AF6B-4087E4160B4D(a)microsoft.com... >I thought it would be nice to test my 64-bit KMDF 1.7 driver on Win 7 > Ultimate RC... well even with a digital certificate used to sign the > driver > package, it is rejected with the following message: > > A recently installed program tried to install an unsigned driver. This > version of Windows requires all drivers to have a valid digital signature. > The driver is unavailable and ... (I get the message) > > So what must I do to bypass this and test my driver? Must I go back to > Server2008? > -- > Mr. Fixit needs your help! - John Bond , LLC
From: John Bond on 23 Oct 2009 14:58 I see that we need a .cer (cross signed certificate?) file based on our public signature. Any estimates on how long it takes to obtain one? -- Mr. Fixit needs your help! - John Bond , LLC "John Bond" wrote: > I thought it would be nice to test my 64-bit KMDF 1.7 driver on Win 7 > Ultimate RC... well even with a digital certificate used to sign the driver > package, it is rejected with the following message: > > A recently installed program tried to install an unsigned driver. This > version of Windows requires all drivers to have a valid digital signature. > The driver is unavailable and ... (I get the message) > > So what must I do to bypass this and test my driver? Must I go back to > Server2008? > -- > Mr. Fixit needs your help! - John Bond , LLC
From: John Bond on 23 Oct 2009 16:56 The command line: SignTool sign /v /ac C:\Verisign\MSCV-VSClass3.cer /s my /n "AudioCodes, Inc." /t http://timestamp.verisign.com/scripts/timestamp.dll SmartWORKSDriver.sys Is giving the following error message: SignTool Error: No certificates were found that met all the given criteria. Number of files successfully Signed: 0 Number of warnings: 0 Number of errors: 1 Is the .cer file found at: http://www.microsoft.com/whdc/winlogo/drvsign/crosscert.mspx the appropriate one to use? Or should I use the .cer I can export out of my certificate store? -- Mr. Fixit needs your help! - John Bond , LLC "David Craig" wrote: > Look on Microsoft.com for a cross signing certificate that matches your > corporate certificate. There are procedures documented in WHQL for driver > and cat file signing. It is fairly easy to do once you have the correct > certs, but since someone else provides those to us I have never done it > myself. Once the certs are done and you have added the private key to your > computer it is just a matter of running inf2cat and signtool on the sys and > inf. > > > "John Bond" <johnbond(a)newsgroup.nospam> wrote in message > news:0785368D-EAE6-4496-AF6B-4087E4160B4D(a)microsoft.com... > >I thought it would be nice to test my 64-bit KMDF 1.7 driver on Win 7 > > Ultimate RC... well even with a digital certificate used to sign the > > driver > > package, it is rejected with the following message: > > > > A recently installed program tried to install an unsigned driver. This > > version of Windows requires all drivers to have a valid digital signature. > > The driver is unavailable and ... (I get the message) > > > > So what must I do to bypass this and test my driver? Must I go back to > > Server2008? > > -- > > Mr. Fixit needs your help! - John Bond , LLC > > > . >
From: David Craig on 23 Oct 2009 23:59
Did you import the pfx into your local certificate store? Did you generate the inf with the inf2cat tool in the 7600.16385.0 (aka 7.0.0) WDK? Use the tools from that WDK as I know it works. "John Bond" <johnbond(a)newsgroup.nospam> wrote in message news:E34FBD0F-6332-4EEC-A1F9-35E6559471C0(a)microsoft.com... > The command line: > > SignTool sign /v /ac C:\Verisign\MSCV-VSClass3.cer /s my /n "AudioCodes, > Inc." /t http://timestamp.verisign.com/scripts/timestamp.dll > SmartWORKSDriver.sys > > Is giving the following error message: > > SignTool Error: No certificates were found that met all the given > criteria. > > Number of files successfully Signed: 0 > Number of warnings: 0 > Number of errors: 1 > > Is the .cer file found at: > http://www.microsoft.com/whdc/winlogo/drvsign/crosscert.mspx > the appropriate one to use? Or should I use the .cer I can export out of > my > certificate store? > -- > Mr. Fixit needs your help! - John Bond , LLC > > > "David Craig" wrote: > >> Look on Microsoft.com for a cross signing certificate that matches your >> corporate certificate. There are procedures documented in WHQL for >> driver >> and cat file signing. It is fairly easy to do once you have the correct >> certs, but since someone else provides those to us I have never done it >> myself. Once the certs are done and you have added the private key to >> your >> computer it is just a matter of running inf2cat and signtool on the sys >> and >> inf. >> >> >> "John Bond" <johnbond(a)newsgroup.nospam> wrote in message >> news:0785368D-EAE6-4496-AF6B-4087E4160B4D(a)microsoft.com... >> >I thought it would be nice to test my 64-bit KMDF 1.7 driver on Win 7 >> > Ultimate RC... well even with a digital certificate used to sign the >> > driver >> > package, it is rejected with the following message: >> > >> > A recently installed program tried to install an unsigned driver. This >> > version of Windows requires all drivers to have a valid digital >> > signature. >> > The driver is unavailable and ... (I get the message) >> > >> > So what must I do to bypass this and test my driver? Must I go back to >> > Server2008? >> > -- >> > Mr. Fixit needs your help! - John Bond , LLC >> >> >> . >> |