Welcome to MSDN Blogs Sign in | Join | Help

How to Sign File System Drivers for Release

Kernel-mode driver binaries for 64-bit versions of Windows Server 2008 and Windows Vista must be signed for release, or Windows will not load the binary. This requirement applies to file system drivers, including minifilters, legacy filters, and redirectors.  For details and links to resources, including slides and a video presentation on file system driver signing, see  How to Release-Sign File System Drivers, available on WHDC.

 

Karlito Bonnevie [MSFT], WDK Technical Writer
http://blogs.msdn.com/wdkdocs
This posting is provided "AS IS" with no warranties, and confers no rights.
Published Friday, April 18, 2008 6:26 PM by wdkblog
Filed under:

Comment Notification

If you would like to receive an email when updates are made to this post, please register here

Subscribe to this post's comments using RSS

Comments

Tuesday, April 22, 2008 8:45 PM by Gary Sanderson

# re: How to Sign File System Drivers for Release

Karlito,

I just viewed your video "How to Release-Sign File System Drivers," and found it very useful.  Most of the information verified that what I am currently doing is correct, but the Signtool verification provided me with a very good tool to allow the release group to properly verify the signature.  Previously I had been using "Chktrust %1" but this only indicates that the file is signed.  Sitntool verify properly indicates how it was signed.

My signing command line is:

  Signtool  sign /v /ac MSCV-VSClass3.cer /a /t http://timestamp.verisign.com/scripts/timstamp.dll %1

I noted that I am not using either the /s or the /n command.  Just to see if there was a difference I added your two commande and received an error indicating that there were multiple certificates.  Unless you see a problem I will be leaving my command line as is and just adding the new verification.

I am very glad that you posted all of the information to your Blog.  Thank you for your good work.

    Gary Sanderson

    Conexant

    949 483-5096

    gary.sanderson@conexant.com

Leave a Comment

(required) 
required 
(required) 

  
Enter Code Here: Required
 
Page view tracker