From: Sushma on
Hi All,

I install my disk upper filter driver using an INF file. From device
manager I select the disk device and select update driver. After
selecting the driver I get a update driver warning.

"Installing this device driver is not recommended because Windows
cannot verify that it is compatible with your hardware. If the driver
is not compatible, your hardware will not function correctly and your
computer might become unstable or stop working completely. Do you want
to continue installing this driver?"

If I press Yes, the installation continues.

Does this message appear If I use wrong INF file or is it a default
message if driver is not WHQL signed?

Is there a way I can eliminate this message?

Any information would be helpful.

Thanks and Regards,
Sushma
From: Maxim S. Shatskih on
> I install my disk upper filter driver using an INF file.

Install without the INF file by a registry patch.

--
Maxim S. Shatskih
Windows DDK MVP
maxim(a)storagecraft.com
http://www.storagecraft.com

From: Sushma on
>
> Install without the INF file by a registry patch.
>

Thanks for the reply. I already have a registry patch.

Just for information, I would just like to know if the update warning
message is because I do not have WHQL signatures or missing sections
in INF file.

Regards,
Sushma
From: Maxim S. Shatskih on
> Just for information, I would just like to know if the update warning
> message is because I do not have WHQL signatures or missing sections
> in INF file.

INF-based install requires:

a) .CAT to be signed by the cert
b) the root of the cert's path must be in Trusted Root Cert Authorities of the Local Machine (not Current User)
c) the bottom-most leaf of the cert's path (i.e. cert itself) must be in Trusted Publishers of the Local Machine (not Current User)

If a) or b) is violated - then you have unsigned driver warning - red on Vista+.

If a) or b) are OK and c) is violated - then you have "Do you trust this software?" on Vista+ or "The signature is OK, but not WHQL-signed" on pre-Vista.

If all 3 are OK - then silent, at least on 2003 and Vista+ (XP sometimes displays the full driver installation wizard, but no signature questions).

Now note that, by default, WHQL is the only trusted publisher (well, WHQL and MS Windows Publisher). So, if you do not want the users to manually install certs, you must WHQL.

--
Maxim S. Shatskih
Windows DDK MVP
maxim(a)storagecraft.com
http://www.storagecraft.com

From: Sushma on

> Now note that, by default, WHQL is the only trusted publisher (well, WHQL and MS Windows Publisher). So, if you do not want the users to manually install certs, you must WHQL.

So, getting the WHQL signature is the only option to avoid warnings if
I install the filter through INF files.