signing drivers

signing drivers

参考： https://docs.microsoft.com/en-us/windows-hardware/drivers/devtest/tools-for-signing-drivers

参考： https://docs.microsoft.com/zh-cn/windows-hardware/drivers/devtest/bcdedit--set

 

D:\>cd /d e:
E:\>
E:\>cd ShareFolder
E:\ShareFolder>
E:\ShareFolder>where makecert
C:\Program Files (x86)\Windows Kits\10\bin\10.0.16299.0\x86\makecert.exe

E:\ShareFolder>
E:\ShareFolder>makecert -r -pe -ss LsgxCertStore -n CN="LSGX" -$ commercial -b 01/01/2020 -e 01/01/2100 "lsgx.cer"
Succeeded

E:\ShareFolder>
E:\ShareFolder>stampinf -f cyusb.inf -d 01/01/2022 -v 10.0.16299.0
Stamping .\cyusb.inf [Version] section with DriverVer=01/01/2022,10.0.16299.0

E:\ShareFolder>
E:\ShareFolder>inf2cat /v /driver:E:\ShareFolder /os:10_RS3_X64
..........................
Signability test complete.

Errors:
None

Warnings:
None

Catalog generation complete.
E:\ShareFolder\cyusb.cat

E:\ShareFolder>
E:\ShareFolder>certmgr.exe /add E:\ShareFolder\lsgx.cer /s /r LocalMachine root /all
CertMgr Succeeded

E:\ShareFolder>certmgr.exe /add E:\ShareFolder\lsgx.cer /s /r LocalMachine trustedpublisher /all
CertMgr Succeeded

E:\ShareFolder>signtool.exe sign /a /v /fd sha256 /s LsgxCertStore /n "LSGX" cyusb.cat

The following certificates have been found to be suitable for signing:
    Issued to: LSGX
    Issued by: LSGX
    Expires:   Fri Jan 01 00:00:00 2100
    SHA1 hash: E257092983BCBAB21652357E2A9BC532A89A2E2A

    Issued to: LSGX
    Issued by: LSGX
    Expires:   Fri Jan 01 00:00:00 2100
    SHA1 hash: 3535C31812F7604669CA5CDD04725012D6D31B90

The following certificate was selected:
    Issued to: LSGX
    Issued by: LSGX
    Expires:   Fri Jan 01 00:00:00 2100
    SHA1 hash: E257092983BCBAB21652357E2A9BC532A89A2E2A

Done Adding Additional Store
Successfully signed: cyusb.cat

Number of files successfully Signed: 1
Number of warnings: 0
Number of errors: 0

E:\ShareFolder>
E:\ShareFolder>signtool.exe sign /a /v /fd sha256 /s LsgxCertStore /n "LSGX" cyusb.sys

The following certificates have been found to be suitable for signing:
    Issued to: LSGX
    Issued by: LSGX
    Expires:   Fri Jan 01 00:00:00 2100
    SHA1 hash: E257092983BCBAB21652357E2A9BC532A89A2E2A

    Issued to: LSGX
    Issued by: LSGX
    Expires:   Fri Jan 01 00:00:00 2100
    SHA1 hash: 3535C31812F7604669CA5CDD04725012D6D31B90

The following certificate was selected:
    Issued to: LSGX
    Issued by: LSGX
    Expires:   Fri Jan 01 00:00:00 2100
    SHA1 hash: E257092983BCBAB21652357E2A9BC532A89A2E2A

Done Adding Additional Store
Successfully signed: CYUSB.sys

Number of files successfully Signed: 1
Number of warnings: 0
Number of errors: 0

E:\ShareFolder>

 

 

C:\Windows\system32>
C:\Windows\system32>bcdedit -set loadoptions DISABLE_INTEGRITY_CHECKS
操作成功完成。

C:\Windows\system32>
C:\Windows\system32>bcdedit -set loadoptions TESTSIGNING ON
操作成功完成。

C:\Windows\system32>
C:\Windows\system32>bcdedit /set TESTSIGNING ON
操作成功完成。

C:\Windows\system32>
C:\Windows\system32>bcdedit /set nointegritychecks on
操作成功完成。

C:\Windows\system32>

 

参考: https://github.com/Jemmy1228/HookSigntool

参考: https://github.com/wanttobeno/FuckCertVerifyTime

 

=========== End