Hallo,
Our company was kicked into the known problem of code signing for Windows 8. (third-pary INF has no digital signature). Never done that before I searched the internet for details about the aquire-certification and sign-driver-package actions. Thanks to the great David Grayson and his collected information on http://www.davidegrayson.com/signing/ I could provide my boss an overview for the process. But there are some questions still remains:
-
We are a german company. Do we have to expect problems, if we purchase the certificate from a foreign provider (e.g. USA)?
-
To sign UMDF-driver, is there only a “code signing certificate” needed (aka TRCA)?
-
If we purchase a “driver signing certificat” (aka MCVR; to include kernel modules), do we need to sent in the drivers for testing (or is that only neccessary for WHQL)?
Thanks in advance,
Tristan.
xxxxx@ifak-system.com wrote:
Hallo,
Our company was kicked into the known problem of code signing for Windows 8. (third-pary INF has no digital signature). Never done that before I searched the internet for details about the aquire-certification and sign-driver-package actions. Thanks to the great David Grayson and his collected information on http://www.davidegrayson.com/signing/ I could provide my boss an overview for the process. But there are some questions still remains:
- We are a german company. Do we have to expect problems, if we purchase the certificate from a foreign provider (e.g. USA)?
You need a certificate authority that is on Microsoft’s list of
cross-certificates. If they’re on the list, then they will work fine.
Some certificate authorities seem to be better prepared to handle
European companies than others.
http://msdn.microsoft.com/en-us/library/windows/hardware/gg487315.aspx
- If we purchase a “driver signing certificat” (aka MCVR; to include kernel modules), do we need to sent in the drivers for testing (or is that only neccessary for WHQL)?
That’s only necessary for WHQL.
–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.