With some help from the OSR forum I was able to find and fix a
problem in my INF file. I was finally able to load a signed driver on
a stock Windows 10 machine on March 21. Like so much of my life, it
all looks so simple in retrospect and it is hard to know if I am smart
for having accomplished it or just stupid for having so much
trouble. The long story is preserved below the fold.
I created a couple bat files to make the process easier. Now I can
build and retrieve a signed package easily.
RMakePkg.bat creates a submission package from the release build.
DMakePkg.bat does the same thing for the debug build.
I make sure the package makes it past the "acceptance" phase, then
I go for a coffee break for 20-30 minutes. After downloading the signed
driver package I run RUnpack.bat to copy the signed executables into
the Out directory.
move /y %userprofile%\Downloads\Signed_*.zip Out\Winx64Release\Signed.zip
copy /y Signed.zip Z:\Share\
pkzip -ext -dir -over Signed.zip
EV vs Class3 Certificates
After the Microsoft Hardware Dashboard account has been created,
drivers can be signed with either the EV or Class3 certificate
and submitted to be counter-signed. The EV certificate is never needed
to sign the drivers. I locked the USB key for my EV certificate in my
safe and have never used it since my first driver signing session.
Budget-strapped developers can get by with only a Class3
certificate if they are able to find a kind and friendly developer who
already has a Hardware Dashboard account. The budgeteer's Class3
certificate can be added to big daddy's Dashboard account, and since
only the developer has the private certificate no one else will be
able to use it. Likewise, the EV certificate is not exposed since it
requires the USB key. This would be a great service for a developer
Comments are moderated.
Anonymous comments are not visible to other users until approved.
The content of comments remains the intellectual property of the poster.
Comments may be removed or reused (but not modified) by this site at
any time without notice.