silent install of a signed driver on Win7?

NTDEV
1

Hello all,
My driver is signed with a Thawte cerfiticate issued to Motorola and it installs without problems on Windows7. However, “Windows Security” pops a window asking whether to “Always trust software from Motorola”. I would like to achieve a totally automated install, no questions asked of the user. Is there a way to write something to the registry or distribute and pre-install the certificate in some way, to make Windows just accept the driver and not ask to “always trust”. I tried pre-installing my certificate into the “Trusted Publisher” store, it did not seem to make a difference. I have an install app, is there anything I can do from it?
Thanks
Rachel

2

You need to WHQL your driver.
http://msdn.microsoft.com/en-us/windows/hardware/gg463010

Regards,
Tim Green
Senior Development Engineer
DisplayLink (UK) Limited
Registered in England No. 04811048

From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Michelson Rachel-CRK007
Sent: 16 March 2012 14:45
To: Windows System Software Devs Interest List
Subject: [ntdev] silent install of a signed driver on Win7?

Hello all,
My driver is signed with a Thawte cerfiticate issued to Motorola and it installs without problems on Windows7. However, “Windows Security” pops a window asking whether to “Always trust software from Motorola”. I would like to achieve a totally automated install, no questions asked of the user. Is there a way to write something to the registry or distribute and pre-install the certificate in some way, to make Windows just accept the driver and not ask to “always trust”. I tried pre-installing my certificate into the “Trusted Publisher” store, it did not seem to make a difference. I have an install app, is there anything I can do from it?
Thanks
Rachel

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

3

Hello ,

Export the certificate from your *.sys driver file as , for example , “driver.cer” and register it with “certmgr.exe” :

>certmgr.exe -add driver.cer -c -s -r localMachine TrustedPublisher

Regards ,

Christiaan
----- Original Message -----
From: Michelson Rachel-CRK007
To: Windows System Software Devs Interest List
Sent: Friday, March 16, 2012 3:45 PM
Subject: [ntdev] silent install of a signed driver on Win7?

Hello all,

My driver is signed with a Thawte cerfiticate issued to Motorola and it installs without problems on Windows7. However, “Windows Security” pops a window asking whether to “Always trust software from Motorola”. I would like to achieve a totally automated install, no questions asked of the user. Is there a way to write something to the registry or distribute and pre-install the certificate in some way, to make Windows just accept the driver and not ask to “always trust”. I tried pre-installing my certificate into the “Trusted Publisher” store, it did not seem to make a difference. I have an install app, is there anything I can do from it?

Thanks

Rachel

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

4

Submitting your dry ver package to WHQL for both 32 and 64 bit platforms and having the WHQL sign th package is the only way I know of to have a “silent” completely unattended driver.

Gary Little
H (952) 223-1349
C (952) 454-4629
xxxxx@comcast.net

On Mar 16, 2012, at 9:45 AM, Michelson Rachel-CRK007 wrote:

Hello all,
My driver is signed with a Thawte cerfiticate issued to Motorola and it installs without problems on Windows7. However, ?Windows Security? pops a window asking whether to ?Always trust software from Motorola?. I would like to achieve a totally automated install, no questions asked of the user. Is there a way to write something to the registry or distribute and pre-install the certificate in some way, to make Windows just accept the driver and not ask to ?always trust?. I tried pre-installing my certificate into the ?Trusted Publisher? store, it did not seem to make a difference. I have an install app, is there anything I can do from it?
Thanks
Rachel

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

5

There are times I hate “friendly” smell checkers ? so let’s fix the piss poor English:

Submitting your driver package to WHQL for both 32 and 64 bit platforms, and WHQL signing the package is the only way I know of to have a completely silent unattended driver.

Gary Little
H (952) 223-1349
C (952) 454-4629
xxxxx@comcast.net

On Mar 16, 2012, at 11:19 AM, Gary Little wrote:

Submitting your dry ver package to WHQL for both 32 and 64 bit platforms and having the WHQL sign th package is the only way I know of to have a “silent” completely unattended driver.

Gary Little
H (952) 223-1349
C (952) 454-4629
xxxxx@comcast.net

On Mar 16, 2012, at 9:45 AM, Michelson Rachel-CRK007 wrote:

> Hello all,
> My driver is signed with a Thawte cerfiticate issued to Motorola and it installs without problems on Windows7. However, ?Windows Security? pops a window asking whether to ?Always trust software from Motorola?. I would like to achieve a totally automated install, no questions asked of the user. Is there a way to write something to the registry or distribute and pre-install the certificate in some way, to make Windows just accept the driver and not ask to ?always trust?. I tried pre-installing my certificate into the ?Trusted Publisher? store, it did not seem to make a difference. I have an install app, is there anything I can do from it?
> Thanks
> Rachel
>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer