about 64 bits driver signature

NTDEV
1

Hi All,

I want to try to install a kernel mode driver on my 64 bits win7. I build it
with win7 x64 checked build environment. I enter system with NO signature
option, then I load this driver with OSR driver loader in administrator.
However, a dialog came out and said “Windows requires a digitally signed
driver”. Could you tell me how can I test my driver without signature.

Marvin

2

Without a signature you need to have the debugger connected and enabled.
When you boot you must then choose the option to disable signatures
(note: the option is good for only the one boot, i.e. you need to do it
each time).

Don Burn (MVP, Windows DKD)
Windows Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr

“Marvin(Fan) Zhang” wrote in message
news:xxxxx@ntdev:

> Hi All,
>
> I want to try to install a kernel mode driver on my 64 bits win7. I build it
> with win7 x64 checked build environment. I enter system with NO signature
> option, then I load this driver with OSR driver loader in administrator.
> However, a dialog came out and said “Windows requires a digitally signed
> driver”. Could you tell me how can I test my driver without signature.
>
> Marvin

3

Search the archives for this oft asked question. Your starting point
is the KMCS Walk Through document from Microsoft which you can find
here http://msdn.microsoft.com/en-us/windows/hardware/gg487328

At 11:42 20/03/2011, Marvin(Fan) Zhang wrote:

Hi All,

I want to try to install a kernel mode driver on my 64 bits win7. I
build it with win7 x64 checked build environment. I enter system
with NO signature option, then I load this driver with OSR driver
loader in administrator. However, a dialog came out and said
“Windows requires a digitally signed driver”. Could you tell me how
can I test my driver without signature.

Marvin

4

>

Without a signature you need to have the debugger connected and
enabled.
When you boot you must then choose the option to disable signatures
(note: the option is good for only the one boot, i.e. you need to do
it
each time).

Alternatively, you can sign your drivers with a self-signed certificate,
and enable testsigning mode (“bcdedit /set testsigning on” or something
similar).

If you install your self-signed cert in the computer cert store you
won’t even get any warning messages when you try and install.

James

5

The easy way is to select “disable driver signature enforcement” each time you boot up the operating system.
or try the test mode as James said with BCDEDIT.
or the best way is to signing you code ,with this way , when you modified your code ,you should sign it again . refer to “KMCS_Walkthrough.doc”.