Win7 64 Bit Self Signed Drivers

NTDEV
1

Hi,

Can someone confirm that self signing can work on Windows 7 64 Bit.

Here is what I have:

Verisign Code Signing Certificate.

Signed the Cat file and driver/inf package.

Installed it and everything looks good.

Installed the certificate in multiple stores of the machine(trusted
publishers etc).

The driver still fails to load. Is it even possible to do this using
this technique of installing my verisign cert on the machine?

Thanks

Pankaj

2

Did you also download the cross certificates from Microsoft? You should have received a link to those when you received your certificate. What kind of driver is it? For some you have to h ave signed CAT file as well as signing the SYS file.

Gary G. Little

----- Original Message -----
From: “Pankaj Garg”
To: “Windows System Software Devs Interest List”
Sent: Wednesday, January 5, 2011 12:39:06 PM
Subject: [ntdev] Win7 64 Bit Self Signed Drivers

Hi,

Can someone confirm that self signing can work on Windows 7 64 Bit.

Here is what I have:

Verisign Code Signing Certificate.

Signed the Cat file and driver/inf package.

Installed it and everything looks good.

Installed the certificate in multiple stores of the machine(trusted publishers etc).

The driver still fails to load. Is it even possible to do this using this technique of installing my verisign cert on the machine?

Thanks

Pankaj
—
NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

3

Follow the directions EXACTLY in “How to Release-Sign a Kernel Module”
in the KMCSW.

Mark Roddy

On Wed, Jan 5, 2011 at 1:39 PM, Pankaj Garg wrote:
> Hi,
>
> Can someone confirm that self signing can work on Windows 7 64 Bit.
>
> Here is what I have:
>
> Verisign Code Signing Certificate.
>
> Signed the Cat file and driver/inf package.
>
> Installed it and everything looks good.
>
> Installed the certificate in multiple stores of the machine(trusted
> publishers etc).
>
>
>
> The driver still fails to load. Is it even possible to do this using this
> technique of installing my verisign cert on the machine?
>
>
>
> Thanks
>
> Pankaj
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer

4

> Hi,

Can someone confirm that self signing can work on Windows 7 64 Bit.

Here is what I have:

Verisign Code Signing Certificate.

Signed the Cat file and driver/inf package.

Installed it and everything looks good.

Installed the certificate in multiple stores of the machine(trusted
publishers
etc).

The driver still fails to load. Is it even possible to do this using
this
technique of installing my verisign cert on the machine?

Just FYI, ‘Self Signed’ normally refers to the situation where you have
created your own certificate without it being signed by anyone else, not
where you have a trusted 3rd party cert.

James

5

>>The driver still fails to load. Is it even possible to do this using this technique of installing my verisign cert on the machine?

If I want to install the certifcate so that it can be recognized when I install the driver ( and without prompting ) , I do following :

certmgr.exe -add mycertifcate.cer -c -s -r localMachine TrustedPublisher

The “mycertifcate.cer” is simply extracted out of the signed *.cat file or the signed *.sys file. ( “copy to file” via “details” via “Via Certificate” ) . Notice that the parameters are case sensitive , thus , do not enter “LOCALmachine trustedpublisher” and similar , but exactly what is written above.

Regards ,

Christiaan

----- Original Message -----
From: Pankaj Garg
To: Windows System Software Devs Interest List
Sent: Wednesday, January 05, 2011 7:39 PM
Subject: [ntdev] Win7 64 Bit Self Signed Drivers

Hi,

Can someone confirm that self signing can work on Windows 7 64 Bit.

Here is what I have:

Verisign Code Signing Certificate.

Signed the Cat file and driver/inf package.

Installed it and everything looks good.

Installed the certificate in multiple stores of the machine(trusted publishers etc).

The driver still fails to load. Is it even possible to do this using this technique of installing my verisign cert on the machine?

Thanks

Pankaj

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer