Failed INF validation during Attestation Signing

NTDEV
1

Hello,

I submitting a driver to the Microsoft Partner Center and the validation fails with the following error:

Error 1430 in SyncplicityDriveFSD_6.Inf, line 55 : Registry value 'Group' not allowed under 'HKR(Service)'.

The strange thing is that the same INF file passed validation one year ago on 17 April 2024. The INF is not changed and the driver has updated version strings and nothing else.

Here is a snippet of the INF file:

;
; Services Section
;

[SyncplicityDriveFSD_6.Service]
DisplayName = %SyncplicityServiceName%
Description = %SyncplicityServiceDesc%
ServiceBinary = %12%\SyncplicityDriveFSD_6.sys ;%windir%\system32\drivers\SyncplicityDriveFSD_6.sys
ServiceType = 2
StartType = 2
ErrorControl = 1 ;SERVICE_ERROR_NORMAL
AddReg = MiniFilter.AddRegistry

;
; Registry Modifications
;

[MiniFilter.AddRegistry]
HKR,,"Group",0x00000000,"Network"
HKR,"NetworkProvider","DeviceName",0x00000000,"\Device\Syncplicity_6"
HKR,"NetworkProvider","Name",0x00000000,"Syncplicity Drive NP"
HKR,"NetworkProvider","ProviderPath",0x00000000,"SyncplicityDrive_6.dll"

If I removed the faulting line, the validation passes. At least it passes, when I try to validate it with InfVerif.exe, but I guess it is the same validation during the Attestation Signing.

I am a bit new into driver development, so I am not completely sure, if HKR,,"Group",0x00000000,"Network" is needed or not?
Also, do you know how come the validation used to pass and now it does not?

Thanks for any information in advance!
Stoyan

2

HKR,,Group under a service key is part of the intrinsic SCM service registration. We've started blocking the ability to manipulate these via registry in an INF file, instead requiring that you use the INF directives to set any service intrinsic. You can accomplish the same thing with the following:

[SyncplicityDriveFSD_6.Service]
DisplayName = %SyncplicityServiceName%
Description = %SyncplicityServiceDesc%
ServiceBinary = %12%\SyncplicityDriveFSD_6.sys ;%windir%\system32\drivers\SyncplicityDriveFSD_6.sys
ServiceType = 2
StartType = 2
ErrorControl = 1 ;SERVICE_ERROR_NORMAL
LoadOrderGroup = Network
AddReg = MiniFilter.AddRegistry

3

Thank you, Zac, for the quick response!