You’d think I’d know most of this information by now, but there are a
couple of WHQL questions for which I cannot find answers.
Is it true that we no longer need to send our hardware to WHQL? So,
WHQL has become nothing more than a log reviewing service?
Is it true that WHQL will *only* accept a Verisign Code Signing
Certificate? My GlobalSign Code Signing Certificate won’t work?
–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.
Tim,
This is my understanding, and I am not an unbiased commentator. WHQL
does not normally require hardware be sent, but I believe they reserve the
right to request it be sent. So yes, WHQL is basically review the logs.
The WinQual site requires a Versign Certificate for access, I am not sure if
the code signing one is enough or not.
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply
“Tim Roberts” wrote in message news:xxxxx@ntdev…
> You’d think I’d know most of this information by now, but there are a
> couple of WHQL questions for which I cannot find answers.
>
> Is it true that we no longer need to send our hardware to WHQL? So,
> WHQL has become nothing more than a log reviewing service?
>
> Is it true that WHQL will only accept a Verisign Code Signing
> Certificate? My GlobalSign Code Signing Certificate won’t work?
>
> –
> Tim Roberts, xxxxx@probo.com
> Providenza & Boekelheide, Inc.
>
>
> -----Original Message-----
From: xxxxx@lists.osr.com [mailto:bounce-336433-
xxxxx@lists.osr.com] On Behalf Of Tim Roberts
Sent: Wednesday, September 10, 2008 2:15 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] WHQL QuestionsYou’d think I’d know most of this information by now, but there are a
couple of WHQL questions for which I cannot find answers.Is it true that we no longer need to send our hardware to WHQL? So,
WHQL has become nothing more than a log reviewing service?
[PCAUSA] Don’t make HW, so can’t speak with authority. But I think that is
true in most cases.
Is it true that WHQL will *only* accept a Verisign Code Signing
Certificate? My GlobalSign Code Signing Certificate won’t work?
[PCAUSA] You must have a Verisign certificate to open a WHQL account.
Thomas F. Divine
–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.
NTDEV is sponsored by OSR
For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminarsTo unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer
When I was at CSR we WHQL’d numerous drivers and never sent in hardware. We
just submitted DTM submission packages. Now, they did have plenty of our BT
radios and headphones and such, but I do not believe anyone on the
Microsoft’s side ever used these for our WHQL submissions.
We had a Verisign cert, so I cannot say. I have heard a lot of noise that
other certs were going to be allowed at some point, but I have never
ventured down that road.
Bill M.
“Tim Roberts” wrote in message news:xxxxx@ntdev…
> You’d think I’d know most of this information by now, but there are a
> couple of WHQL questions for which I cannot find answers.
>
> Is it true that we no longer need to send our hardware to WHQL? So,
> WHQL has become nothing more than a log reviewing service?
>
> Is it true that WHQL will only accept a Verisign Code Signing
> Certificate? My GlobalSign Code Signing Certificate won’t work?
>
> –
> Tim Roberts, xxxxx@probo.com
> Providenza & Boekelheide, Inc.
>
>
Bill,
They keep promising, I first heard that promise in 2002. They said
they would look into it, but 6 years later it still has not happened. I
find it ironic, that they let you sign a driver, and tell their customers
that you can be trusted with various cert’s but will only accept one for
logging on to their site!
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply
“Bill McKenzie” wrote in message
news:xxxxx@ntdev…
> When I was at CSR we WHQL’d numerous drivers and never sent in hardware.
> We just submitted DTM submission packages. Now, they did have plenty of
> our BT radios and headphones and such, but I do not believe anyone on the
> Microsoft’s side ever used these for our WHQL submissions.
>
> We had a Verisign cert, so I cannot say. I have heard a lot of noise that
> other certs were going to be allowed at some point, but I have never
> ventured down that road.
>
> Bill M.
>
> “Tim Roberts” wrote in message news:xxxxx@ntdev…
>> You’d think I’d know most of this information by now, but there are a
>> couple of WHQL questions for which I cannot find answers.
>>
>> Is it true that we no longer need to send our hardware to WHQL? So,
>> WHQL has become nothing more than a log reviewing service?
>>
>> Is it true that WHQL will only accept a Verisign Code Signing
>> Certificate? My GlobalSign Code Signing Certificate won’t work?
>>
>> –
>> Tim Roberts, xxxxx@probo.com
>> Providenza & Boekelheide, Inc.
>>
>>
>
>
>
In fairness, signing drivers is one thing, setting up a moderately
complex secure website that will reliably create SSL sessions using a
variety of certificate authorities’ as roots is another. I’m sure it’s
doable, but I doubt anyone’s offering to pay them to do it.
Don Burn wrote:
Bill,
They keep promising, I first heard that promise in 2002. They said
they would look into it, but 6 years later it still has not happened. I
find it ironic, that they let you sign a driver, and tell their customers
that you can be trusted with various cert’s but will only accept one for
logging on to their site!
–
Ray
(If you want to reply to me off list, please remove “spamblock.” from my
email address)
At $500, which is what I think the Verisign cert cost last I was involved
with getting one, it wasn’t really something we were all that concerned
about. Compared to something like a CATC analyzer, its in the noise.
Bill M.
“Ray Trent” wrote in message
news:xxxxx@ntdev…
> In fairness, signing drivers is one thing, setting up a moderately complex
> secure website that will reliably create SSL sessions using a variety of
> certificate authorities’ as roots is another. I’m sure it’s doable, but I
> doubt anyone’s offering to pay them to do it.
>
> Don Burn wrote:
>> Bill,
>>
>> They keep promising, I first heard that promise in 2002. They said
>> they would look into it, but 6 years later it still has not happened. I
>> find it ironic, that they let you sign a driver, and tell their customers
>> that you can be trusted with various cert’s but will only accept one for
>> logging on to their site!
>>
>>
>
> –
> Ray
> (If you want to reply to me off list, please remove “spamblock.” from my
> email address)
>
Don Burn wrote:
The WinQual site requires a Versign Certificate for access, I am not sure if
the code signing one is enough or not.
I don’t know about WHQL, but WinQual will accept a VeriSign
“organizational certificate”, which is VeriSign-for-WinQual (no
code-signing), and at least at the time I bought mine, the GlobalSign
Code Signing + VeriSign Org was still cheaper than VeriSign Code Signing.
Best regards,
-Stephen Cleary
My complaint is that it requires a certain level of corporate entity. In my
case I have no problem with the cost of the cert, but the rest of the costs
will drive me permanenty out of the marketplace. I have customers who want
to do everthing with WHQL for them, when I say give me your cert they balk,
when I say fine pay me $250,000 to start the project they balk.
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply
“Bill McKenzie” wrote in message
news:xxxxx@ntdev…
> At $500, which is what I think the Verisign cert cost last I was involved
> with getting one, it wasn’t really something we were all that concerned
> about. Compared to something like a CATC analyzer, its in the noise.
>
> Bill M.
>
> “Ray Trent” wrote in message
> news:xxxxx@ntdev…
>> In fairness, signing drivers is one thing, setting up a moderately
>> complex secure website that will reliably create SSL sessions using a
>> variety of certificate authorities’ as roots is another. I’m sure it’s
>> doable, but I doubt anyone’s offering to pay them to do it.
>>
>> Don Burn wrote:
>>> Bill,
>>>
>>> They keep promising, I first heard that promise in 2002. They
>>> said they would look into it, but 6 years later it still has not
>>> happened. I find it ironic, that they let you sign a driver, and tell
>>> their customers that you can be trusted with various cert’s but will
>>> only accept one for logging on to their site!
>>>
>>>
>>
>> –
>> Ray
>> (If you want to reply to me off list, please remove “spamblock.” from my
>> email address)
>>
>
>
>
Ray Trent wrote:
In fairness, signing drivers is one thing, setting up a moderately
complex secure website that will reliably create SSL sessions using a
variety of certificate authorities’ as roots is another. I’m sure it’s
doable, but I doubt anyone’s offering to pay them to do it.
Poppycock. They’re not using these to create SSL sessions. Apache does
that straight out of the box. This is about verifying identity, to make
sure I don’t try to submit drivers under HP’s name. For that, you’d
think any number of root authorities would work.
–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.
Don Burn wrote:
My complaint is that it requires a certain level of corporate entity.
The process with GlobalSign was actually relatively painless.
I have customers who want
to do everthing with WHQL for them, when I say give me your cert they balk,
when I say fine pay me $250,000 to start the project they balk.
The WHQL rules say the submission is supposed to be done literally by an
employee of the company getting the signature. Are your clients willing
to accept a “Don Burn” signature in their drivers? I’m not sure there’s
anything wrong with that, I just wondered.
–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.
Tim,
Actually that is what they want. Basically for a couple of small
firms I am their driver development group. I would be very interested if
there is a way to get access to WinQual without creating a business entity.
Don
“Tim Roberts” wrote in message news:xxxxx@ntdev…
> Don Burn wrote:
>> My complaint is that it requires a certain level of corporate entity.
>
> The process with GlobalSign was actually relatively painless.
>
>> I have customers who want
>> to do everthing with WHQL for them, when I say give me your cert they
>> balk,
>> when I say fine pay me $250,000 to start the project they balk.
>>
>
> The WHQL rules say the submission is supposed to be done literally by an
> employee of the company getting the signature. Are your clients willing
> to accept a “Don Burn” signature in their drivers? I’m not sure there’s
> anything wrong with that, I just wondered.
>
> –
> Tim Roberts, xxxxx@probo.com
> Providenza & Boekelheide, Inc.
>
>
Don Burn wrote:
I have customers who want to do everthing with WHQL for them,
when I say give me your cert they balk, when I say fine pay me
$250,000 to start the project they balk.
VIOLATION!!! Not allowed to discuss pricing on this list…