Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Home NTDEV
Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

More Info on Driver Writing and Debugging


The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.


Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/


EV-Signing an existing driver

PummeloPummelo Member Posts: 6

Hello,
we have a rather old kernel mode driver which is fully functional under Win64. However, this driver is not signed with an EV certificate and therefore requires to Disable Driver Signature Enforcement.
Unfortunately we don't have any source code of this driver anymore i.e. the only files are the .inf and .sys.
Question: Is it at all possible to get this driver (re)-signed with an EV certificate and send it to MS attestation.
In particular, we don't have a .PDB file to include in the CAB.
I tried to do this by creating a new driver project in VS 2019 and simply add these files, however checking of the inf file fails, because it uses some unsupported settings which may even be faulty to some degree, even though the driver as such works for our purpose.

Thanks for any help,
Roland

Comments

  • Dejan_MaksimovicDejan_Maksimovic Member - All Emails Posts: 373
    via Email
    How old is it, was it signed and timestamped by any valid cross-cert before
    June 2015?
    If so, it should load on x64 W10, IIRC.

    You need a valid .INF otherwise, to submit for attestation.

    Kind regards, Dejan Maksimovic.
    FS Lead: http://www.alfasp.com
  • PummeloPummelo Member Posts: 6

    @Dejan_Maksimovic said:
    How old is it, was it signed and timestamped by any valid cross-cert before
    June 2015?

    No, unfortunately it had not been signed with a valid cross certificate. It is from 2010 or so and therefore it does not load under Win10 64.

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
Writing WDF Drivers 7 Dec 2020 LIVE ONLINE
Internals & Software Drivers 25 Jan 2021 LIVE ONLINE
Developing Minifilters 8 March 2021 LIVE ONLINE