Question About Driver Signing. (Multiple Device's. Same Driver)

We have a USB device which comes in 3 flavours, but all variants use the
exact same WDM driver.

The difference is that we do a ‘pure usb’, a ‘usb or serial’ and a ‘usb or
parallel’ version of the device.
(Just FYI. For the ‘USB or xxx’ devices this means that an alternative
communications method is available. The purpose of this is to allow our
device to be used via those alternate mediums under non-USB supporting O/Ss
like 95 and NT4).

For each flavour we use a different USB PID (product id). We do this so we
can tell them apart by product name in device manager, internally the
hardware on the USB side of things is exactly the same apart from USB PID.

We now have to sign our USB driver due to a customer driven requirement.

Question is. Can we just sign the driver for our ‘pure usb device’ and use
the same signature for the other devices?
Obviously this has benefits when counting the cost of the process.

So basically. Is the driver signature in the .cat file essentially a hash of
the driver binary we need signed, or is there more information like the
Hardware ID/Product ID as well? (In which case we’d have 3 signatures for
the same driver).

Regards,

Rob Linegar
Software Engineer
Data Encryption Systems Limited