Signed Drivers throws unsigned driver warning in Windows 7

Sivaram_Kannan · August 8, 2011, 3:38am

Hi,

I have a driver which was WHQL qualified. I used Windows 2008 R2 and
Windows 2008 for qualification and the driver works without any
problems on Windows 2008 and Windows 2008 R2. But when I try
installing the driver on a Windows 7 (64 bit Professional or Ultimate)
it is throwing a warning that the driver is unsigned. But after
installation the system has no problem is booting(as the 64 bit os
will not boot with unsigned driver). There is no such warning when I
try the software on Windows 2008 64bit and Windows 2008 R2.

What can I do to avoid the that warning during installation?

Thanks,
./Siva

OSR_Community_User · August 8, 2011, 4:01am

> I have a driver which was WHQL qualified. I used Windows 2008 R2 and

Windows 2008 for qualification and the driver works without any
problems on Windows 2008 and Windows 2008 R2. But when I try
installing the driver on a Windows 7 (64 bit Professional or Ultimate)
it is throwing a warning that the driver is unsigned. But after
installation the system has no problem is booting(as the 64 bit os
will not boot with unsigned driver). There is no such warning when I
try the software on Windows 2008 64bit and Windows 2008 R2.

What can I do to avoid the that warning during installation?

You need to also WHQL sign for Windows 7.

At least it sounds like you have the embedded signature correct so x64 Windows will load it after confirming if you trust it.

Tim.

Sivaram_Kannan · August 8, 2011, 4:14am

>

You need to also WHQL sign for Windows 7.

At least it sounds like you have the embedded signature correct so x64 Windows will load it after confirming if you trust it.

Tim.

When I did the WHQL, the options were there only for Windows 7 and
Windows Vista. The Windows 2008 R2 results were automatically
considered as Windows 7 and W2K8 was considered as Windows Vista. So,
I think I signed the driver for Window 7 and Vista as well.

Thanks,
./Siva

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

James_Harper · August 8, 2011, 4:23am

Is the cat file signed?

Sent from my iPhone

On 08/08/2011, at 17:39, “Sivaram Kannan” wrote:

> Hi,
>
> I have a driver which was WHQL qualified. I used Windows 2008 R2 and
> Windows 2008 for qualification and the driver works without any
> problems on Windows 2008 and Windows 2008 R2. But when I try
> installing the driver on a Windows 7 (64 bit Professional or Ultimate)
> it is throwing a warning that the driver is unsigned. But after
> installation the system has no problem is booting(as the 64 bit os
> will not boot with unsigned driver). There is no such warning when I
> try the software on Windows 2008 64bit and Windows 2008 R2.
>
> What can I do to avoid the that warning during installation?
>
> Thanks,
> ./Siva
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

Sivaram_Kannan · August 8, 2011, 4:49am

On Mon, Aug 8, 2011 at 1:52 PM, James Harper
wrote:
> Is the cat file signed?
>

Yes. Cat file is signed and it gets copied to proper location as well
during the driver installation.

./Siva.

>>
>> —
>> NTDEV is sponsored by OSR
>>
>> For our schedule of WDF, WDM, debugging and other seminars visit:
>> http://www.osr.com/seminars
>>
>> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>

James_Harper · August 8, 2011, 5:30am

Is it signed after the binary is signed? I can’t remember if that matters or not…

Sent from my iPhone

On 08/08/2011, at 18:49, “Sivaram Kannan” wrote:

> On Mon, Aug 8, 2011 at 1:52 PM, James Harper
> wrote:
>> Is the cat file signed?
>>
>
> Yes. Cat file is signed and it gets copied to proper location as well
> during the driver installation.
>
> ./Siva.
>
>>>
>>> —
>>> NTDEV is sponsored by OSR
>>>
>>> For our schedule of WDF, WDM, debugging and other seminars visit:
>>> http://www.osr.com/seminars
>>>
>>> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>>
>> —
>> NTDEV is sponsored by OSR
>>
>> For our schedule of WDF, WDM, debugging and other seminars visit:
>> http://www.osr.com/seminars
>>
>> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

Sivaram_Kannan · August 8, 2011, 5:47am

On Mon, Aug 8, 2011 at 3:00 PM, James Harper
wrote:
> Is it signed after the binary is signed? I can’t remember if that matters or not…
>

No. It was signed before the WHQL. The signing is part of the WHQL. If
either .sys or the cat file is not signed I think the boot process
will fail(Driver signing enforcement). There is no problem with the
booting, but a warning is prompted during installation. Though there
is no actual harm, we are being questioned whether the driver is
signed or not and whether it is safe to gohead with the installation.

Thanks,
./Siva.

> Sent from my iPhone
>
> On 08/08/2011, at 18:49, “Sivaram Kannan” wrote:
>
>> On Mon, Aug 8, 2011 at 1:52 PM, James Harper
>> wrote:
>>> Is the cat file signed?
>>>
>>
>> Yes. Cat file is signed and it gets copied to proper location as well
>> during the driver installation.
>>
>> ./Siva.
>>
>>>>
>>>> —
>>>> NTDEV is sponsored by OSR
>>>>
>>>> For our schedule of WDF, WDM, debugging and other seminars visit:
>>>> http://www.osr.com/seminars
>>>>
>>>> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>>>
>>> —
>>> NTDEV is sponsored by OSR
>>>
>>> For our schedule of WDF, WDM, debugging and other seminars visit:
>>> http://www.osr.com/seminars
>>>
>>> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>>>
>>
>> —
>> NTDEV is sponsored by OSR
>>
>> For our schedule of WDF, WDM, debugging and other seminars visit:
>> http://www.osr.com/seminars
>>
>> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>

Kent_Vanderwaal · August 12, 2011, 7:13am

We’re having the same issue. Our USB driver was WHQL tested for Windows 7, the catalog file was generated for XP, Server 2003, Server 2008, Vista and Windows 7.

Trying to install on Server 2003, it says the driver was authenticated for another OS.

I can’t believe drivers have to be WHQL tested for every specific Windows OS, 32 and 64 bit.

Calin_Iaru · August 12, 2011, 7:56am

I have a different experience:

ZwMapViewOfSection(address, PAGE_READWRITE) and ZwMapViewOfSection(sameAddress, PAGE_READWRITE|PAGE_WRITECOMBINE) fails on Vista x86 and passes on 7 x64. It turns out that I had a problem in the lower driver.

Similarly, there was a problem on 7 which passed on every other: MmMapIoSpace(MmNonCached) + ZwMapViewOfSection(WRITECOMBINE) would generate a performance hit on 7.?

It is useful to test, detect and fix on different versions.

From: “xxxxx@smiths-medical.com”
To: Windows System Software Devs Interest List
Sent: Friday, August 12, 2011 1:11 PM
Subject: RE:[ntdev] Signed Drivers throws unsigned driver warning in Windows 7

We’re having the same issue.? Our USB driver was WHQL tested for Windows 7, the catalog file was generated for XP, Server 2003, Server 2008, Vista and Windows 7.?

Trying to install on Server 2003, it says the driver was authenticated for another OS.?

I can’t believe drivers have to be WHQL tested for every specific Windows OS, 32 and 64 bit.

—
NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

Pavel_Lebedinsky · August 14, 2011, 3:51pm

Looks like you’re talking about mapping the \Device\PhysicalMemory section… In this case, trying to map the same physical range with different caching attributes is illegal (ZwMapViewOfSection docs mention this). Depending on the OS version and other details, you can get a failure, a silent processor corruption, or the OS may simply ignore the conflicting attribute (this is likely what happened in your second example below).

Thanks,
Pavel

From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Calin Iaru
Sent: Friday, August 12, 2011 4:56 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] Signed Drivers throws unsigned driver warning in Windows 7

I have a different experience:

ZwMapViewOfSection(address, PAGE_READWRITE) and ZwMapViewOfSection(sameAddress, PAGE_READWRITE|PAGE_WRITECOMBINE) fails on Vista x86 and passes on 7 x64. It turns out that I had a problem in the lower driver.

Similarly, there was a problem on 7 which passed on every other: MmMapIoSpace(MmNonCached) + ZwMapViewOfSection(WRITECOMBINE) would generate a performance hit on 7.

It is useful to test, detect and fix on different versions.

From: “xxxxx@smiths-medical.com mailto:xxxxx” >
To: Windows System Software Devs Interest List >
Sent: Friday, August 12, 2011 1:11 PM
Subject: RE:[ntdev] Signed Drivers throws unsigned driver warning in Windows 7

We’re having the same issue. Our USB driver was WHQL tested for Windows 7, the catalog file was generated for XP, Server 2003, Server 2008, Vista and Windows 7.

Trying to install on Server 2003, it says the driver was authenticated for another OS.

I can’t believe drivers have to be WHQL tested for every specific Windows OS, 32 and 64 bit.

—
NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

—
NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer</mailto:xxxxx>