If the description of the
methodology to sign a driver provided in the documentation of WDK seems complex,
it is actually very simple to sign a driver.
Here is the method:
- Install the WDK,
- Install the certificate,
- In one directory, place
the binary of driver to be signed and file the certificate downloaded from
: http://www.microsoft.com/whdc/winlogo/drvsign/crosscert.mspx,
- Start a DDK compilation
console for a chosen compilation environment (eg "Windows Vista and Windows
Server Longhorn x86 Free Build Environment"),
- Go in the directory containing
the binary to be signed,
- Start: signtool sign
/ a / ac <selected cross certificate> / v / t <url of timestamp>
<selected driver>
- Which gives, for example,
for a GlobalSign certificate:
signtool sign / a / ac MSCV-GlobalSign.cer / v / t
http://timestamp.globalsign.com/scr... PhSerUsb.sys.
Attention: only the call
command line signtool allows to attach the cross-certificate properly.