In setupapi.dev.log I have the following:
sig: {_VERIFY_FILE_SIGNATURE} 09:47:09.734
sig: Key = vbus.inf
sig: FilePath = z:\tmp\vbus.inf
sig: Catalog = z:\tmp\vbus.cat
! sig: Verifying file against specific (valid) catalog
failed! (0x800b0109)
! sig: Error 0x800b0109: A certificate chain processed, but
terminated in a root certificate which is not trusted by the trust
provider.
sig: {_VERIFY_FILE_SIGNATURE exit(0x800b0109)} 09:47:09.828
sig: {_VERIFY_FILE_SIGNATURE} 09:47:09.843
sig: Key = vbus.inf
sig: FilePath = z:\tmp\vbus.inf
sig: Catalog = z:\tmp\vbus.cat
sig: Success: File is signed in Authenticode™ catalog.
sig: Error 0xe0000242: The publisher of an
Authenticode™ signed catalog has not yet been established as trusted.
sig: {_VERIFY_FILE_SIGNATURE exit(0xe0000242)} 09:47:09.859
I create and install a test cert with:
makecert -r -pe -ss root -n “CN=vbus” mycert.cer
certmgr /add mycert.cer /s /r localMachine root
And I create the catalog and sign the .inf with:
inf2cat /driver:z:\tmp /os:7_X86
signtool sign /v /s root /n vbus /t
http://verisign.timestamp.com/scripts/timestamp.dll vbus.cat
(after copying over the vbus.inf, vbus.sys and:
C:\WinDDK\7600.16385.0\redist\wdf\x86\WdfCoInstaller01009.dll)
Is the above correct? If so, what do the errors mean?
Thanks,
-PWM