More on Code Signing

Tim_Roberts · April 30, 2007, 4:48pm

Is anyone successfully using a GTE CyberTrust code-signing certificate
to get Vista 64 drivers loaded?

Verisign wants $499 for one year, but CyberTrust only wants $229. If it
really works, that seems like a no-brainer.

Equifax is shown on WHQL’s web site as the only other US choice, but the
Equifax web site doesn’t have anything about code-signing.

–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

Thomas_Divine-2 · April 30, 2007, 5:05pm

Whatever certificate you get, make sure it can be used to open a WHQL
account. Having a WHQL account is necessary if you want to submit driver for
WHQL signature. Requirements for opening a WHQL account may differ from
certs that can be used for self-signing.

Of course, if you will not be making submissions to WHQL, then this is a
non-issue.

I don’t have answer to your specific question. Hope someone else chimes in.

Thomas F. Divine

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:bounce-285118-
xxxxx@lists.osr.com] On Behalf Of Tim Roberts
Sent: Monday, April 30, 2007 4:48 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] More on Code Signing

Is anyone successfully using a GTE CyberTrust code-signing certificate
to get Vista 64 drivers loaded?

Verisign wants $499 for one year, but CyberTrust only wants $229. If
it
really works, that seems like a no-brainer.

Equifax is shown on WHQL’s web site as the only other US choice, but
the
Equifax web site doesn’t have anything about code-signing.

–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

Don_Burn_1 · April 30, 2007, 5:24pm

At last years WinHEC I asked about whether a “code signing” cert could open
a WHQL account, the answer came back “If it is Verisign”. I suggested they
consider fixing this so that other certs would work, but I never heard that
they did this. Actually, it is more than just WHQL submissions that are
impacted here, if want to get to the WinQual database AFAIK you need a WHQL
account. Since WinQual has all the dump reports from systems that crash and
indicate they want to notify Microsoft, this is important stuff.

–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr

“Thomas F. Divine” wrote in message
news:xxxxx@ntdev…
> Whatever certificate you get, make sure it can be used to open a WHQL
> account. Having a WHQL account is necessary if you want to submit driver
> for
> WHQL signature. Requirements for opening a WHQL account may differ from
> certs that can be used for self-signing.
>
> Of course, if you will not be making submissions to WHQL, then this is a
> non-issue.
>
> I don’t have answer to your specific question. Hope someone else chimes
> in.
>
> Thomas F. Divine
>
>
>> -----Original Message-----
>> From: xxxxx@lists.osr.com [mailto:bounce-285118-
>> xxxxx@lists.osr.com] On Behalf Of Tim Roberts
>> Sent: Monday, April 30, 2007 4:48 PM
>> To: Windows System Software Devs Interest List
>> Subject: [ntdev] More on Code Signing
>>
>> Is anyone successfully using a GTE CyberTrust code-signing certificate
>> to get Vista 64 drivers loaded?
>>
>> Verisign wants $499 for one year, but CyberTrust only wants $229. If
>> it
>> really works, that seems like a no-brainer.
>>
>> Equifax is shown on WHQL’s web site as the only other US choice, but
>> the
>> Equifax web site doesn’t have anything about code-signing.
>>
>> –
>> Tim Roberts, xxxxx@probo.com
>> Providenza & Boekelheide, Inc.
>>
>>
>> —
>> Questions? First check the Kernel Driver FAQ at
>> http://www.osronline.com/article.cfm?id=256
>>
>> To unsubscribe, visit the List Server section of OSR Online at
>> http://www.osronline.com/page.cfm?name=ListServer
>
>

cristalink-2 · April 30, 2007, 5:50pm

I’ve been recently through the process. You need a Verisign certificate to
open a WHQL account and make submissions. You can get one for $99, but it
won’t work for code signing, only for WHQL. I was very lucky to have
accidentally come across Verisign’s promotion on microsoft.com and purchased
a full-blown Verisign certificate for the same $99. How good is that!
There’s also another promotion on the WHQL site for $399.

“Tim Roberts” wrote in message news:xxxxx@ntdev…
> Is anyone successfully using a GTE CyberTrust code-signing certificate
> to get Vista 64 drivers loaded?
>
> Verisign wants $499 for one year, but CyberTrust only wants $229. If it
> really works, that seems like a no-brainer.
>
> Equifax is shown on WHQL’s web site as the only other US choice, but the
> Equifax web site doesn’t have anything about code-signing.
>
> –
> Tim Roberts, xxxxx@probo.com
> Providenza & Boekelheide, Inc.
>
>

OSR_Community_User · April 30, 2007, 6:50pm

We cannot get VeriSign certificate for more then 6 months AFAIK. So you’re
even more lucky then you think

Regards,
Anton A. Kolomyeytsev

CEO, Rocket Division Software

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of cristalink
Sent: Tuesday, May 01, 2007 12:50 AM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] More on Code Signing

I’ve been recently through the process. You need a Verisign certificate to
open a WHQL account and make submissions. You can get one for $99, but it
won’t work for code signing, only for WHQL. I was very lucky to have
accidentally come across Verisign’s promotion on microsoft.com and purchased

a full-blown Verisign certificate for the same $99. How good is that!
There’s also another promotion on the WHQL site for $399.

“Tim Roberts” wrote in message news:xxxxx@ntdev…
> Is anyone successfully using a GTE CyberTrust code-signing certificate
> to get Vista 64 drivers loaded?
>
> Verisign wants $499 for one year, but CyberTrust only wants $229. If it
> really works, that seems like a no-brainer.
>
> Equifax is shown on WHQL’s web site as the only other US choice, but the
> Equifax web site doesn’t have anything about code-signing.
>
> –
> Tim Roberts, xxxxx@probo.com
> Providenza & Boekelheide, Inc.
>
>

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

anton_bassov · April 30, 2007, 7:22pm

> We cannot get VeriSign certificate for more then 6 months AFAIK. So you’re

even more lucky then you think

…unless it happens to be valid for around a month or so, or, probably, comes with some other “surprize” - quite often it happens that various promotions, discounts, etc turn out to be not as favourable as they seem to be at the first glance

Anton Bassov

cristalink-2 · May 1, 2007, 7:02pm

> There’s also another promotion on the WHQL site for $399.
http://www.verisign.com/code-signing/msft-partner-code-signing/index.html

“cristalink” wrote in message news:xxxxx@ntdev…
> I’ve been recently through the process. You need a Verisign certificate to
> open a WHQL account and make submissions. You can get one for $99, but it
> won’t work for code signing, only for WHQL. I was very lucky to have
> accidentally come across Verisign’s promotion on microsoft.com and
> purchased a full-blown Verisign certificate for the same $99. How good is
> that! There’s also another promotion on the WHQL site for $399.
>
>
> “Tim Roberts” wrote in message news:xxxxx@ntdev…
>> Is anyone successfully using a GTE CyberTrust code-signing certificate
>> to get Vista 64 drivers loaded?
>>
>> Verisign wants $499 for one year, but CyberTrust only wants $229. If it
>> really works, that seems like a no-brainer.
>>
>> Equifax is shown on WHQL’s web site as the only other US choice, but the
>> Equifax web site doesn’t have anything about code-signing.
>>
>> –
>> Tim Roberts, xxxxx@probo.com
>> Providenza & Boekelheide, Inc.
>>
>>
>
>
>