Home page > About us > Signing a driver
Signing a driver

If the description of the methodology to sign a driver provided in the documentation of WDK seems complex, it is actually very simple to sign a driver.

Here is the method:

  1. Install the WDK,
  2. Install the certificate,
  3. In one directory, place the binary of driver to be signed and file the certificate downloaded from : http://www.microsoft.com/whdc/winlogo/drvsign/crosscert.mspx,
  4. Start a DDK compilation console for a chosen compilation environment (eg "Windows Vista and Windows Server Longhorn x86 Free Build Environment"),
  5. Go in the directory containing the binary to be signed,
  6. Start: signtool sign / a / ac <selected cross certificate> / v / t <url of timestamp> <selected driver>
  7. Which gives, for example, for a GlobalSign certificate:
    signtool sign / a / ac MSCV-GlobalSign.cer / v / t
    http://timestamp.globalsign.com/scr... PhSerUsb.sys.

Attention: only the call command line signtool allows to attach the cross-certificate properly.

Copyright © 2012 Philog™ | Site Map | mentions legales | Intranet