Disable Singned Kernel Driver Constraint in Vista 64 final

  • Thread starter Thread starter Sebastian Dau
  • Start date Start date
S

Sebastian Dau

Hello

I'm struggling with my WLAN USB dongle.
The driver is unsigned but runs if signature check is disabled.
However in Vista 64 final I coud not find a way to permanently disble
this check. Right now I us F8 for each boot.

Thanks for your help.

Sebastian Dau
 
Sebastian Dau said:
I'm struggling with my WLAN USB dongle.
The driver is unsigned but runs if signature check is disabled.
However in Vista 64 final I coud not find a way to permanently disble this
check. Right now I us F8 for each boot.

Then sign it youself...

- Install Platdorm SDK or Windows Driver Kit.
- Use MAKECERT to create your own certificate.
- Use SIGNTOOL to sign and timestamp driver files.
- Add your cert to trusted root certs store on your computer.
- Install drivers, enjoy.

For more info refer to online WDK documentation (watch line wrapping):
http://msdn.com/library/en-us/DevIn..._a8832a63-b31c-49b4-af2e-2e595cf8fca6.xml.asp

You may also turn on kernel debugging which by default turns off driver
signing by running 'bcdedit -debug on' command but I'm not sure if it is a
good idea and if there are any implications in running in debug mode.
http://msdn.com/library/en-us/DevIn..._ef1cc06b-20f2-4621-a174-0cbed6ebbd71.xml.asp
 
Hello Sebastian,

Windows Vista does not support permanently disabling driver signing on
64-bit platforms.

Have a great day,

--
Kristan Kenney
Windows Live Butterfly

News and Experiences on Windows Vista and beyond: http://www.windows-now.com

This post is provided "AS IS" with no warranties, and confers no rights.
 
Alexander Suhovey said:
Then sign it youself...

- Install Platdorm SDK or Windows Driver Kit.
- Use MAKECERT to create your own certificate.
- Use SIGNTOOL to sign and timestamp driver files.
- Add your cert to trusted root certs store on your computer.
- Install drivers, enjoy.

For more info refer to online WDK documentation (watch line wrapping):
http://msdn.com/library/en-us/DevIn..._a8832a63-b31c-49b4-af2e-2e595cf8fca6.xml.asp

You may also turn on kernel debugging which by default turns off driver
signing by running 'bcdedit -debug on' command but I'm not sure if it is a
good idea and if there are any implications in running in debug mode.
http://msdn.com/library/en-us/DevIn..._ef1cc06b-20f2-4621-a174-0cbed6ebbd71.xml.asp


More detailed links on code signing:

How to create a certificate with MAKECERT:
http://msdn.com/library/en-us/DevIn..._4bd1a456-81fb-490a-b377-ef7183fc1864.xml.asp

How to sign a driver using SIGNTOOL:
http://msdn.com/library/en-us/DevIn..._a5118a44-7b15-48c5-ba2e-9c2ca8446ace.xml.asp
 
Back
Top