Signing kernel code x64
in [Win32 Kernel]
|
Prev: Windows 7 checked HAL source file
Next: OpenEvent() fails on Vista for some processes while trying to open global event
From: Sivaller on 25 Dec 2009 12:19 Hello, Seven X64 and Vista refuses to load unsigned drivers. I develop a windows kernel driver, but it does not turn on X64 platforms because it is not signed To sign the driver should be required to purchase a certificate with GlobalSign and VeriSign. Being an individual does have the right to purchase a certificate through as an organization Sivaller and than organization Sivaller not exist ? By being a little poor in English, from what I understand, when you buy a certificate, globalsign or verisign contact the person to verify if the organization exists. If it is necessary to be an organization, how can I sign my driver because I'm all alone develop. Thank you.
From: Don Burn on 25 Dec 2009 14:14 This is a problem, it has been discussed in detail on the NTDEV list at http://www.osronline.com/ The answer right now is you can't sign it, you either have to tell your users to hit the override for driver signing at boot time or find a firm that will sign it for you. -- Don Burn (MVP, Windows DKD) Windows Filesystem and Driver Consulting Website: http://www.windrvr.com Blog: http://msmvps.com/blogs/WinDrvr Remove StopSpam to reply "Sivaller" <sivaller.ni(a)voila.Fr> wrote in message news:eELmCaYhKHA.592(a)TK2MSFTNGP06.phx.gbl... > Hello, > > Seven X64 and Vista refuses to load unsigned drivers. > > I develop a windows kernel driver, but it does not turn on X64 platforms > because it is not signed > > To sign the driver should be required to purchase a certificate with > GlobalSign and VeriSign. > > Being an individual does have the right to purchase a certificate through > as an organization Sivaller and than organization Sivaller not exist ? > By being a little poor in English, from what I understand, when you buy a > certificate, globalsign or verisign contact the person to verify if the > organization exists. > > If it is necessary to be an organization, how can I sign my driver because > I'm all alone develop. > > Thank you. > > __________ Information from ESET NOD32 Antivirus, version of virus > signature database 4716 (20091225) __________ > > The message was checked by ESET NOD32 Antivirus. > > http://www.eset.com > > > __________ Information from ESET NOD32 Antivirus, version of virus signature database 4716 (20091225) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com
From: Stefan Kuhr on 25 Dec 2009 14:36 Hello Sivaller, On 12/25/2009 6:19 PM, Sivaller wrote: > Hello, > > Seven X64 and Vista refuses to load unsigned drivers. > > I develop a windows kernel driver, but it does not turn on X64 platforms > because it is not signed > > To sign the driver should be required to purchase a certificate with > GlobalSign and VeriSign. > > Being an individual does have the right to purchase a certificate > through as an organization Sivaller and than organization Sivaller not > exist ? > By being a little poor in English, from what I understand, when you buy > a certificate, globalsign or verisign contact the person to verify if > the organization exists. > > If it is necessary to be an organization, how can I sign my driver > because I'm all alone develop. > > Thank you. I haven't yet read the discussion that Don refers to, but when I last talked to the German representatives of GlobalSign, I was told, that I would have to fax them a copy of my personal identity card and then they will issue a certificate to me as an individual. This is almost two years ago and back then the need for a certificate for me as an individual all of a sudden disappeared, so I never tried this and I also do not know if additional steps would have to be taken to prove my identioty to them. In Germany we also have a scheme that literally translated means "postal identity procedure" that is used for lots of procedures that involve proving your identity. It consists out of showing up in a post office branch and showing your identity card and then the local post office clerk acts as some sort of notary and confirms to a third party that you are the person you claim to be. Maybe there is something similar in France, just contact the representatives of certificate issuers in France. They want to earn money with your certificate so they ought to do something to help you get your certificate. -- S
From: Don Burn on 25 Dec 2009 14:41 Stefan, This discussion started since GlobalSign this year dropped selling certificates to individuals. So unfortunately there is no option. -- Don Burn (MVP, Windows DKD) Windows Filesystem and Driver Consulting Website: http://www.windrvr.com Blog: http://msmvps.com/blogs/WinDrvr Remove StopSpam to reply "Stefan Kuhr" <kustt110(a)gmx.li> wrote in message news:%23As8fmZhKHA.1236(a)TK2MSFTNGP04.phx.gbl... > Hello Sivaller, > > On 12/25/2009 6:19 PM, Sivaller wrote: >> Hello, >> >> Seven X64 and Vista refuses to load unsigned drivers. >> >> I develop a windows kernel driver, but it does not turn on X64 platforms >> because it is not signed >> >> To sign the driver should be required to purchase a certificate with >> GlobalSign and VeriSign. >> >> Being an individual does have the right to purchase a certificate >> through as an organization Sivaller and than organization Sivaller not >> exist ? >> By being a little poor in English, from what I understand, when you buy >> a certificate, globalsign or verisign contact the person to verify if >> the organization exists. >> >> If it is necessary to be an organization, how can I sign my driver >> because I'm all alone develop. >> >> Thank you. > > I haven't yet read the discussion that Don refers to, but when I last > talked to the German representatives of GlobalSign, I was told, that I > would have to fax them a copy of my personal identity card and then they > will issue a certificate to me as an individual. This is almost two years > ago and back then the need for a certificate for me as an individual all > of a sudden disappeared, so I never tried this and I also do not know if > additional steps would have to be taken to prove my identioty to them. In > Germany we also have a scheme that literally translated means "postal > identity procedure" that is used for lots of procedures that involve > proving your identity. It consists out of showing up in a post office > branch and showing your identity card and then the local post office clerk > acts as some sort of notary and confirms to a third party that you are the > person you claim to be. Maybe there is something similar in France, just > contact the representatives of certificate issuers in France. They want to > earn money with your certificate so they ought to do something to help you > get your certificate. > > -- > S > > > > > > > > __________ Information from ESET NOD32 Antivirus, version of virus > signature database 4716 (20091225) __________ > > The message was checked by ESET NOD32 Antivirus. > > http://www.eset.com > > > __________ Information from ESET NOD32 Antivirus, version of virus signature database 4716 (20091225) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com
From: Stefan Kuhr on 25 Dec 2009 15:00
Hi Don, On 12/25/2009 8:41 PM, Don Burn wrote: > Stefan, > > This discussion started since GlobalSign this year dropped selling > certificates to individuals. So unfortunately there is no option. > > Oh, thanks for that information, i didn't know that. -- S |