Keyboard filter media keys

makrurisan_makkeln

We write an keyboard filter which change, delete and modify keys. All works fine but we don't get the media keys. Our filter driver is an Upperfilter and is above kbdclass.
If we change the position below kbdclass the filter doesnt work.
What is the reason for that? What is the solution that we can change modify keys and get the media keys too?

Doron_Holan

Media keys on a usb hid device are in a separate top level collection outside of the keyboard top level collection. If you want to filter media keys you would need to filter the appropriate HID PDO.

d

Bent from my phone
________________________________
From: [email protected] on behalf of [email protected]
Sent: Wednesday, February 7, 2018 8:43:21 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] Keyboard filter media keys

We write an keyboard filter which change, delete and modify keys. All works fine but we don't get the media keys. Our filter driver is an Upperfilter and is above kbdclass.
If we change the position below kbdclass the filter doesnt work.
What is the reason for that? What is the solution that we can change modify keys and get the media keys too?

---
NTDEV is sponsored by OSR

Visit the list online at:

MONTHLY seminars on crash dump analysis, WDF, Windows internals and software drivers!
Details at

To unsubscribe, visit the List Server section of OSR Online at

makrurisan_makkeln

Can this be done with the some filter driver? Where can I find this top level PDO?

Doron_Holan

You would install your filter with an INF to match by hardware ID. Any usb keyboard with media keys will do

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of [email protected]
Sent: Wednesday, February 7, 2018 1:35 PM
To: Windows System Software Devs Interest List <[email protected]>
Subject: RE:[ntdev] Keyboard filter media keys

Can this be done with the some filter driver? Where can I find this top level PDO?

---
NTDEV is sponsored by OSR

Visit the list online at: <https://na01.safelinks.protection.outlook.com/?url=http://www.osronline.com/showlists.cfm?list=ntdev&amp;data=04|01|[email protected]|dab7530a7cc04ffefdd908d56e728aa9|ee3303d7fb734b0c8589bcd847f1c277|1|0|636536360601953658|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=cQNTV/v9LNduBaDVXjGfWD24EyukhNyzJBSrRzcimIs=&amp;reserved=0&gt;

MONTHLY seminars on crash dump analysis, WDF, Windows internals and software drivers!
Details at <https://na01.safelinks.protection.outlook.com/?url=http://www.osr.com/seminars&amp;data=04|01|[email protected]|dab7530a7cc04ffefdd908d56e728aa9|ee3303d7fb734b0c8589bcd847f1c277|1|0|636536360601953658|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=/IshDbmLxoT0UrnnmfoXU9xl/KidywIP8VoTJFniwxM=&amp;reserved=0&gt;

To unsubscribe, visit the List Server section of OSR Online at <https://na01.safelinks.protection.outlook.com/?url=http://www.osronline.com/page.cfm?name=ListServer&amp;data=04|01|[email protected]|dab7530a7cc04ffefdd908d56e728aa9|ee3303d7fb734b0c8589bcd847f1c277|1|0|636536360601953658|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=F24b0z2T0rHJZ4/CljLCBYuo6iQNAv1RZ29CNQVkO/s=&amp;reserved=0&gt;

makrurisan_makkeln

Can this be done also dynamically? If I use inf file for specific keyboard it seem that I must change the inf file each time another keyboard reached the machine.

Doron_Holan

It could be done dynamically but you will have missed the critical opening of the handle to the device by win32K where all these keys are reported. And win32k may stash the stack size for the device and not have enough room for your filter. You can write an inf that matches on a generic hw or compat ID, all of the media key top level collections use the same usage page

Bent from my phone
________________________________
From: [email protected] on behalf of [email protected]
Sent: Wednesday, February 7, 2018 11:38:05 PM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] Keyboard filter media keys

Can this be done also dynamically? If I use inf file for specific keyboard it seem that I must change the inf file each time another keyboard reached the machine.

---
NTDEV is sponsored by OSR

Visit the list online at:

MONTHLY seminars on crash dump analysis, WDF, Windows internals and software drivers!
Details at

To unsubscribe, visit the List Server section of OSR Online at

makrurisan_makkeln

If I install the filter driver with a generic hw, does this mean the filter driver is a device specific filter driver and I must create a registry entry through an AddReg in the inf file?
I found HID_DEVICE_SYSTEM_KEYBOARD under HardwareId, is this such a generic hw id?

Tim_Roberts

On Feb 11, 2018, at 5:35 AM, [email protected] <[email protected]> wrote:
>
> If I install the filter driver with a generic hw, does this mean the filter driver is a device specific filter driver and I must create a registry entry through an AddReg in the inf file?

You do need to create a registry entry, although you can do it from an app rather than an INF. If you want your filter installed on every such device, you can install it as a class filter,


> I found HID_DEVICE_SYSTEM_KEYBOARD under HardwareId, is this such a generic hw id?

That is a generic hardware ID, but there's no guarantee your keyboard will match that ID.
—
Tim Roberts, [email protected]
Providenza & Boekelheide, Inc.

Doron_Holan

HID_DEVICE_SYSTEM_KEYBOARD is a compat is for the keyboard top level collection. The media keys are in a diff top level collection which has different ids. Yes, you will need to install per device instance. If the inf is properly written and signed, you just need to import the inf once and it will be installed on existing instances and new instances automatically. Filtering the class (HID) will add your filter to every HID on the system which will be a pretty big job for you to maintain to make sure you don?t regress behavior.

Bent from my phone
________________________________
From: [email protected] on behalf of [email protected]
Sent: Sunday, February 11, 2018 6:53:18 PM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] Keyboard filter media keys

On Feb 11, 2018, at 5:35 AM, [email protected] wrote:
>
> If I install the filter driver with a generic hw, does this mean the filter driver is a device specific filter driver and I must create a registry entry through an AddReg in the inf file?

You do need to create a registry entry, although you can do it from an app rather than an INF. If you want your filter installed on every such device, you can install it as a class filter,


> I found HID_DEVICE_SYSTEM_KEYBOARD under HardwareId, is this such a generic hw id?

That is a generic hardware ID, but there's no guarantee your keyboard will match that ID.
?
Tim Roberts, [email protected]
Providenza & Boekelheide, Inc.


---
NTDEV is sponsored by OSR

Visit the list online at:

MONTHLY seminars on crash dump analysis, WDF, Windows internals and software drivers!
Details at

To unsubscribe, visit the List Server section of OSR Online at

makrurisan_makkeln

Is it in this way that I can add and Upperfilters entry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\HID at a specific Keyboard and place my filter in the Upperfilters value?

Tim_Roberts

[email protected] wrote:
> Is it in this way that I can add and Upperfilters entry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\HID at a specific Keyboard and place my filter in the Upperfilters value?

I'm not exactly sure what you're asking.  To install a filter driver,
all you have to do is copy the file into place, create a service, and
then create the registry entry in Enum.  You can do that using
SetupDiSetDeviceRegistryProperty, once you have found the device you
want to filter with the other SetupDi APIs.

--
Tim Roberts, [email protected]
Providenza & Boekelheide, Inc.

Doron_Holan

The manual route will not work when a new keyboard shows up. If a new keyboard is plugged in and you have an INF matching on the compatible ID, your filter will always be installed on the media top level collection

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of [email protected]
Sent: Monday, February 12, 2018 10:52 AM
To: Windows System Software Devs Interest List <[email protected]>
Subject: Re: [ntdev] Keyboard filter media keys

[email protected] wrote:
> Is it in this way that I can add and Upperfilters entry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\HID at a specific Keyboard and place my filter in the Upperfilters value?

I'm not exactly sure what you're asking.  To install a filter driver, all you have to do is copy the file into place, create a service, and then create the registry entry in Enum.  You can do that using SetupDiSetDeviceRegistryProperty, once you have found the device you want to filter with the other SetupDi APIs.

--
Tim Roberts, [email protected]
Providenza & Boekelheide, Inc.


---
NTDEV is sponsored by OSR

Visit the list online at: <https://na01.safelinks.protection.outlook.com/?url=http://www.osronline.com/showlists.cfm?list=ntdev&amp;data=04|01|[email protected]|3803955034244933ae4808d57249c0bf|72f988bf86f141af91ab2d7cd011db47|1|0|636540583453423352|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=GFWA9anKIjpaSf9ea5FD6YdwmQpYvUvJQysSHCkT5PA=&amp;reserved=0&gt;

MONTHLY seminars on crash dump analysis, WDF, Windows internals and software drivers!
Details at <https://na01.safelinks.protection.outlook.com/?url=http://www.osr.com/seminars&amp;data=04|01|[email protected]|3803955034244933ae4808d57249c0bf|72f988bf86f141af91ab2d7cd011db47|1|0|636540583453423352|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=+2Fd1ZpiBRHaALbgohludj5ha9lWsGYQLQOwB+Aj3v0=&amp;reserved=0&gt;

To unsubscribe, visit the List Server section of OSR Online at <https://na01.safelinks.protection.outlook.com/?url=http://www.osronline.com/page.cfm?name=ListServer&amp;data=04|01|[email protected]|3803955034244933ae4808d57249c0bf|72f988bf86f141af91ab2d7cd011db47|1|0|636540583453423352|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=GTQIdpOYNh1lBdaJUR0BDxV3qBbO6+ocNGE7JE6CmWo=&amp;reserved=0&gt;

Formerly_R0b0t1

On Mon, Feb 12, 2018 at 12:19 AM, [email protected]
<[email protected]> wrote:
> HID_DEVICE_SYSTEM_KEYBOARD is a compat is for the keyboard top level
> collection. The media keys are in a diff top level collection which has
> different ids. Yes, you will need to install per device instance. If the inf
> is properly written and signed, you just need to import the inf once and it
> will be installed on existing instances and new instances automatically.
> Filtering the class (HID) will add your filter to every HID on the system
> which will be a pretty big job for you to maintain to make sure you don’t
> regress behavior.
>

Can you explain what you mean? Most media keys I am aware of are in
the keyboard usage page. There is another usage page, consumer
controls, that contains some almost identical names, but those are not
associated with keyboards (it's hard to infer what they are actually
for; if they are for a specific device, as the standard says, why is
that state broadcast over USB?).

Do you mean that some keyboards enumerate as a boot keyboard with
extra information for media keys? Per the spec and the recommended
boot keyboard descriptor, this also isn't right, but I don't
understand how it would be causing problems.

Cheers,
R0b0t1

> ________________________________
> From: [email protected] <[email protected]>
> on behalf of [email protected] <[email protected]>
> Sent: Sunday, February 11, 2018 6:53:18 PM
> To: Windows System Software Devs Interest List
> Subject: Re: [ntdev] Keyboard filter media keys
>
> On Feb 11, 2018, at 5:35 AM, [email protected]
> <[email protected]> wrote:
>>
>> If I install the filter driver with a generic hw, does this mean the
>> filter driver is a device specific filter driver and I must create a
>> registry entry through an AddReg in the inf file?
>
> You do need to create a registry entry, although you can do it from an app
> rather than an INF. If you want your filter installed on every such device,
> you can install it as a class filter,
>
>
>> I found HID_DEVICE_SYSTEM_KEYBOARD under HardwareId, is this such a
>> generic hw id?
>
> That is a generic hardware ID, but there's no guarantee your keyboard will
> match that ID.
> —
> Tim Roberts, [email protected]
> Providenza & Boekelheide, Inc.
>
>
> ---
> NTDEV is sponsored by OSR
>
> Visit the list online at:
> <https://na01.safelinks.protection.outlook.com/?url=http://www.osronline.com/showlists.cfm?list=ntdev&amp;data=04|01|[email protected]|7602516ad8d94b5f13b108d571c3cef6|ee3303d7fb734b0c8589bcd847f1c277|1|0|636540008165920502|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=JQmkXqaBiaRiiWk7PFsfB8gaABcSVSrdN+oHfvQ7Vqw=&amp;reserved=0&gt;
>
> MONTHLY seminars on crash dump analysis, WDF, Windows internals and software
> drivers!
> Details at
> <https://na01.safelinks.protection.outlook.com/?url=http://www.osr.com/seminars&amp;data=04|01|[email protected]|7602516ad8d94b5f13b108d571c3cef6|ee3303d7fb734b0c8589bcd847f1c277|1|0|636540008165920502|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=Z/Nl08PwSbXTpwy9TkVy9R99j93b4Py3hl4uJhaTTm8=&amp;reserved=0&gt;
>
> To unsubscribe, visit the List Server section of OSR Online at
> <https://na01.safelinks.protection.outlook.com/?url=http://www.osronline.com/page.cfm?name=ListServer&amp;data=04|01|[email protected]|7602516ad8d94b5f13b108d571c3cef6|ee3303d7fb734b0c8589bcd847f1c277|1|0|636540008165930511|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=Yn01a03CjZkAQiDt944yDnmUozel49yYCnNYXLHkqkA=&amp;reserved=0&gt;
>
> ---
> NTDEV is sponsored by OSR
>
> Visit the list online at:
> <http://www.osronline.com/showlists.cfm?list=ntdev&gt;
>
> MONTHLY seminars on crash dump analysis, WDF, Windows internals and software
> drivers!
> Details at <http://www.osr.com/seminars&gt;
>
> To unsubscribe, visit the List Server section of OSR Online at
> <http://www.osronline.com/page.cfm?name=ListServer&gt;

Doron_Holan

The boot scenario handles a limited set of keys and IIRC the keyboard stops operating in boot mode as soon as the host OS loads and resets it.

I have never seen a HID with media keys report them through the keyboard TLC (even if the keyboard usage page has usages defined). They have always come from the consumer collection.

d

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of [email protected]
Sent: Monday, February 12, 2018 4:34 PM
To: Windows System Software Devs Interest List <[email protected]>
Subject: Re: [ntdev] Keyboard filter media keys

On Mon, Feb 12, 2018 at 12:19 AM, [email protected] <[email protected]> wrote:
> HID_DEVICE_SYSTEM_KEYBOARD is a compat is for the keyboard top level
> collection. The media keys are in a diff top level collection which
> has different ids. Yes, you will need to install per device instance.
> If the inf is properly written and signed, you just need to import the
> inf once and it will be installed on existing instances and new instances automatically.
> Filtering the class (HID) will add your filter to every HID on the
> system which will be a pretty big job for you to maintain to make sure
> you don’t regress behavior.
>

Can you explain what you mean? Most media keys I am aware of are in the keyboard usage page. There is another usage page, consumer controls, that contains some almost identical names, but those are not associated with keyboards (it's hard to infer what they are actually for; if they are for a specific device, as the standard says, why is that state broadcast over USB?).

Do you mean that some keyboards enumerate as a boot keyboard with extra information for media keys? Per the spec and the recommended boot keyboard descriptor, this also isn't right, but I don't understand how it would be causing problems.

Cheers,
R0b0t1

> ________________________________
> From: [email protected]
> <[email protected]>
> on behalf of [email protected] <[email protected]>
> Sent: Sunday, February 11, 2018 6:53:18 PM
> To: Windows System Software Devs Interest List
> Subject: Re: [ntdev] Keyboard filter media keys
>
> On Feb 11, 2018, at 5:35 AM, [email protected]
> <[email protected]> wrote:
>>
>> If I install the filter driver with a generic hw, does this mean the
>> filter driver is a device specific filter driver and I must create a
>> registry entry through an AddReg in the inf file?
>
> You do need to create a registry entry, although you can do it from an
> app rather than an INF. If you want your filter installed on every
> such device, you can install it as a class filter,
>
>
>> I found HID_DEVICE_SYSTEM_KEYBOARD under HardwareId, is this such a
>> generic hw id?
>
> That is a generic hardware ID, but there's no guarantee your keyboard
> will match that ID.
> —
> Tim Roberts, [email protected]
> Providenza & Boekelheide, Inc.
>
>
> ---
> NTDEV is sponsored by OSR
>
> Visit the list online at:
> sronline.com%2Fshowlists.cfm%3Flist%3Dntdev&data=04%7C01%7CDoron.Holan
> %40microsoft.com%7C7602516ad8d94b5f13b108d571c3cef6%7Cee3303d7fb734b0c
> 8589bcd847f1c277%7C1%7C0%7C636540008165920502%7CUnknown%7CTWFpbGZsb3d8
> eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdat
> a=JQmkXqaBiaRiiWk7PFsfB8gaABcSVSrdN%2BoHfvQ7Vqw%3D&reserved=0>
>
> MONTHLY seminars on crash dump analysis, WDF, Windows internals and
> software drivers!
> Details at
> sr.com%2Fseminars&data=04%7C01%7CDoron.Holan%40microsoft.com%7C7602516
> ad8d94b5f13b108d571c3cef6%7Cee3303d7fb734b0c8589bcd847f1c277%7C1%7C0%7
> C636540008165920502%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIj
> oiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=Z%2FNl08PwSbXTpwy9TkVy9R
> 99j93b4Py3hl4uJhaTTm8%3D&reserved=0>
>
> To unsubscribe, visit the List Server section of OSR Online at
> sronline.com%2Fpage.cfm%3Fname%3DListServer&data=04%7C01%7CDoron.Holan
> %40microsoft.com%7C7602516ad8d94b5f13b108d571c3cef6%7Cee3303d7fb734b0c
> 8589bcd847f1c277%7C1%7C0%7C636540008165930511%7CUnknown%7CTWFpbGZsb3d8
> eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdat
> a=Yn01a03CjZkAQiDt944yDnmUozel49yYCnNYXLHkqkA%3D&reserved=0>
>
> ---
> NTDEV is sponsored by OSR
>
> Visit the list online at:
> sronline.com%2Fshowlists.cfm%3Flist%3Dntdev&data=04%7C01%7CDoron.Holan
> %40microsoft.com%7Ceba8e01453534ff602a708d572797697%7C72f988bf86f141af
> 91ab2d7cd011db47%7C1%7C0%7C636540788426105658%7CUnknown%7CTWFpbGZsb3d8
> eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdat
> a=JU24amIe8culC0xw8h1dLA2u%2BHNWTrIPjGRW3HNy2xE%3D&reserved=0>
>
> MONTHLY seminars on crash dump analysis, WDF, Windows internals and
> software drivers!
> Details at
> sr.com%2Fseminars&data=04%7C01%7CDoron.Holan%40microsoft.com%7Ceba8e01
> 453534ff602a708d572797697%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7
> C636540788426105658%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIj
> oiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=CoJwkPubzSQFo8XhjqA3jfq1
> 2J7G2%2BW2wF%2F6CRGALXA%3D&reserved=0>
>
> To unsubscribe, visit the List Server section of OSR Online at
> sronline.com%2Fpage.cfm%3Fname%3DListServer&data=04%7C01%7CDoron.Holan
> %40microsoft.com%7Ceba8e01453534ff602a708d572797697%7C72f988bf86f141af
> 91ab2d7cd011db47%7C1%7C0%7C636540788426105658%7CUnknown%7CTWFpbGZsb3d8
> eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdat
> a=S8nnCcIMKl%2FBZbvNcVOEJkBiuYLcMdDR8UR5i6Pl%2F5Y%3D&reserved=0>

---
NTDEV is sponsored by OSR

Visit the list online at: <https://na01.safelinks.protection.outlook.com/?url=http://www.osronline.com/showlists.cfm?list=ntdev&amp;data=04|01|[email protected]|eba8e01453534ff602a708d572797697|72f988bf86f141af91ab2d7cd011db47|1|0|636540788426105658|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=JU24amIe8culC0xw8h1dLA2u+HNWTrIPjGRW3HNy2xE=&amp;reserved=0&gt;

MONTHLY seminars on crash dump analysis, WDF, Windows internals and software drivers!
Details at <https://na01.safelinks.protection.outlook.com/?url=http://www.osr.com/seminars&amp;data=04|01|[email protected]|eba8e01453534ff602a708d572797697|72f988bf86f141af91ab2d7cd011db47|1|0|636540788426105658|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=CoJwkPubzSQFo8XhjqA3jfq12J7G2+W2wF/6CRGALXA=&amp;reserved=0&gt;

To unsubscribe, visit the List Server section of OSR Online at <https://na01.safelinks.protection.outlook.com/?url=http://www.osronline.com/page.cfm?name=ListServer&amp;data=04|01|[email protected]|eba8e01453534ff602a708d572797697|72f988bf86f141af91ab2d7cd011db47|1|0|636540788426105658|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=S8nnCcIMKl/BZbvNcVOEJkBiuYLcMdDR8UR5i6Pl/5Y=&amp;reserved=0&gt;

Formerly_R0b0t1

On Mon, Feb 12, 2018 at 7:08 PM, [email protected]
<[email protected]> wrote:
> The boot scenario handles a limited set of keys and IIRC the keyboard stops operating in boot mode as soon as the host OS loads and resets it.
>
> I have never seen a HID with media keys report them through the keyboard TLC (even if the keyboard usage page has usages defined). They have always come from the consumer collection.
>

Sorry Doran, looks like you are right - I misread the spec, partially
because most userspace interfaces to key events package everything
together. May have been the same mistake OP was making.

Cheers,
R0b0t1

>
> -----Original Message-----
> From: [email protected] [mailto:[email protected]] On Behalf Of [email protected]
> Sent: Monday, February 12, 2018 4:34 PM
> To: Windows System Software Devs Interest List <[email protected]>
> Subject: Re: [ntdev] Keyboard filter media keys
>
> On Mon, Feb 12, 2018 at 12:19 AM, [email protected] <[email protected]> wrote:
>> HID_DEVICE_SYSTEM_KEYBOARD is a compat is for the keyboard top level
>> collection. The media keys are in a diff top level collection which
>> has different ids. Yes, you will need to install per device instance.
>> If the inf is properly written and signed, you just need to import the
>> inf once and it will be installed on existing instances and new instances automatically.
>> Filtering the class (HID) will add your filter to every HID on the
>> system which will be a pretty big job for you to maintain to make sure
>> you don’t regress behavior.
>>
>
> Can you explain what you mean? Most media keys I am aware of are in the keyboard usage page. There is another usage page, consumer controls, that contains some almost identical names, but those are not associated with keyboards (it's hard to infer what they are actually for; if they are for a specific device, as the standard says, why is that state broadcast over USB?).
>
> Do you mean that some keyboards enumerate as a boot keyboard with extra information for media keys? Per the spec and the recommended boot keyboard descriptor, this also isn't right, but I don't understand how it would be causing problems.
>
> Cheers,
> R0b0t1
>
>> ________________________________
>> From: [email protected]
>> <[email protected]>
>> on behalf of [email protected] <[email protected]>
>> Sent: Sunday, February 11, 2018 6:53:18 PM
>> To: Windows System Software Devs Interest List
>> Subject: Re: [ntdev] Keyboard filter media keys
>>
>> On Feb 11, 2018, at 5:35 AM, [email protected]
>> <[email protected]> wrote:
>>>
>>> If I install the filter driver with a generic hw, does this mean the
>>> filter driver is a device specific filter driver and I must create a
>>> registry entry through an AddReg in the inf file?
>>
>> You do need to create a registry entry, although you can do it from an
>> app rather than an INF. If you want your filter installed on every
>> such device, you can install it as a class filter,
>>
>>
>>> I found HID_DEVICE_SYSTEM_KEYBOARD under HardwareId, is this such a
>>> generic hw id?
>>
>> That is a generic hardware ID, but there's no guarantee your keyboard
>> will match that ID.
>> —
>> Tim Roberts, [email protected]
>> Providenza & Boekelheide, Inc.
>>
>>
>> ---
>> NTDEV is sponsored by OSR
>>
>> Visit the list online at:
>> > sronline.com%2Fshowlists.cfm%3Flist%3Dntdev&data=04%7C01%7CDoron.Holan
>> %40microsoft.com%7C7602516ad8d94b5f13b108d571c3cef6%7Cee3303d7fb734b0c
>> 8589bcd847f1c277%7C1%7C0%7C636540008165920502%7CUnknown%7CTWFpbGZsb3d8
>> eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdat
>> a=JQmkXqaBiaRiiWk7PFsfB8gaABcSVSrdN%2BoHfvQ7Vqw%3D&reserved=0>
>>
>> MONTHLY seminars on crash dump analysis, WDF, Windows internals and
>> software drivers!
>> Details at
>> > sr.com%2Fseminars&data=04%7C01%7CDoron.Holan%40microsoft.com%7C7602516
>> ad8d94b5f13b108d571c3cef6%7Cee3303d7fb734b0c8589bcd847f1c277%7C1%7C0%7
>> C636540008165920502%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIj
>> oiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=Z%2FNl08PwSbXTpwy9TkVy9R
>> 99j93b4Py3hl4uJhaTTm8%3D&reserved=0>
>>
>> To unsubscribe, visit the List Server section of OSR Online at
>> > sronline.com%2Fpage.cfm%3Fname%3DListServer&data=04%7C01%7CDoron.Holan
>> %40microsoft.com%7C7602516ad8d94b5f13b108d571c3cef6%7Cee3303d7fb734b0c
>> 8589bcd847f1c277%7C1%7C0%7C636540008165930511%7CUnknown%7CTWFpbGZsb3d8
>> eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdat
>> a=Yn01a03CjZkAQiDt944yDnmUozel49yYCnNYXLHkqkA%3D&reserved=0>
>>
>> ---
>> NTDEV is sponsored by OSR
>>
>> Visit the list online at:
>> > sronline.com%2Fshowlists.cfm%3Flist%3Dntdev&data=04%7C01%7CDoron.Holan
>> %40microsoft.com%7Ceba8e01453534ff602a708d572797697%7C72f988bf86f141af
>> 91ab2d7cd011db47%7C1%7C0%7C636540788426105658%7CUnknown%7CTWFpbGZsb3d8
>> eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdat
>> a=JU24amIe8culC0xw8h1dLA2u%2BHNWTrIPjGRW3HNy2xE%3D&reserved=0>
>>
>> MONTHLY seminars on crash dump analysis, WDF, Windows internals and
>> software drivers!
>> Details at
>> > sr.com%2Fseminars&data=04%7C01%7CDoron.Holan%40microsoft.com%7Ceba8e01
>> 453534ff602a708d572797697%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7
>> C636540788426105658%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIj
>> oiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=CoJwkPubzSQFo8XhjqA3jfq1
>> 2J7G2%2BW2wF%2F6CRGALXA%3D&reserved=0>
>>
>> To unsubscribe, visit the List Server section of OSR Online at
>> > sronline.com%2Fpage.cfm%3Fname%3DListServer&data=04%7C01%7CDoron.Holan
>> %40microsoft.com%7Ceba8e01453534ff602a708d572797697%7C72f988bf86f141af
>> 91ab2d7cd011db47%7C1%7C0%7C636540788426105658%7CUnknown%7CTWFpbGZsb3d8
>> eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdat
>> a=S8nnCcIMKl%2FBZbvNcVOEJkBiuYLcMdDR8UR5i6Pl%2F5Y%3D&reserved=0>
>
> ---
> NTDEV is sponsored by OSR
>
> Visit the list online at: <https://na01.safelinks.protection.outlook.com/?url=http://www.osronline.com/showlists.cfm?list=ntdev&amp;data=04|01|[email protected]|eba8e01453534ff602a708d572797697|72f988bf86f141af91ab2d7cd011db47|1|0|636540788426105658|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=JU24amIe8culC0xw8h1dLA2u+HNWTrIPjGRW3HNy2xE=&amp;reserved=0&gt;
>
> MONTHLY seminars on crash dump analysis, WDF, Windows internals and software drivers!
> Details at <https://na01.safelinks.protection.outlook.com/?url=http://www.osr.com/seminars&amp;data=04|01|[email protected]|eba8e01453534ff602a708d572797697|72f988bf86f141af91ab2d7cd011db47|1|0|636540788426105658|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=CoJwkPubzSQFo8XhjqA3jfq12J7G2+W2wF/6CRGALXA=&amp;reserved=0&gt;
>
> To unsubscribe, visit the List Server section of OSR Online at <https://na01.safelinks.protection.outlook.com/?url=http://www.osronline.com/page.cfm?name=ListServer&amp;data=04|01|[email protected]|eba8e01453534ff602a708d572797697|72f988bf86f141af91ab2d7cd011db47|1|0|636540788426105658|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ==|-1&amp;sdata=S8nnCcIMKl/BZbvNcVOEJkBiuYLcMdDR8UR5i6Pl/5Y=&amp;reserved=0&gt;
>
> ---
> NTDEV is sponsored by OSR
>
> Visit the list online at: <http://www.osronline.com/showlists.cfm?list=ntdev&gt;
>
> MONTHLY seminars on crash dump analysis, WDF, Windows internals and software drivers!
> Details at <http://www.osr.com/seminars&gt;
>
> To unsubscribe, visit the List Server section of OSR Online at <http://www.osronline.com/page.cfm?name=ListServer&gt;