Disable Singned Kernel Driver Constraint in Vista 64 final

[Sebastian Dau]

Hello

I'm struggling with my WLAN USB dongle.
The driver is unsigned but runs if signature check is disabled.
However in Vista 64 final I coud not find a way to permanently disble
this check. Right now I us F8 for each boot.

Thanks for your help.

Sebastian Dau

 

[Alexander Suhovey]

I'm struggling with my WLAN USB dongle.
The driver is unsigned but runs if signature check is disabled.
However in Vista 64 final I coud not find a way to permanently disble this
check. Right now I us F8 for each boot.

Then sign it youself...

- Install Platdorm SDK or Windows Driver Kit.
- Use MAKECERT to create your own certificate.
- Use SIGNTOOL to sign and timestamp driver files.
- Add your cert to trusted root certs store on your computer.
- Install drivers, enjoy.

For more info refer to online WDK documentation (watch line wrapping):
http://msdn.com/library/en-us/DevIn..._a8832a63-b31c-49b4-af2e-2e595cf8fca6.xml.asp

You may also turn on kernel debugging which by default turns off driver
signing by running 'bcdedit -debug on' command but I'm not sure if it is a
good idea and if there are any implications in running in debug mode.
http://msdn.com/library/en-us/DevIn..._ef1cc06b-20f2-4621-a174-0cbed6ebbd71.xml.asp

 

[Kristan Kenney]

Hello Sebastian,

Windows Vista does not support permanently disabling driver signing on
64-bit platforms.

Have a great day,

--
Kristan Kenney
Windows Live Butterfly

News and Experiences on Windows Vista and beyond: http://www.windows-now.com

This post is provided "AS IS" with no warranties, and confers no rights.

 

[Jeff]

Nice tidbit there Alexander, nice.
I'll havta look into that

Jeff

 

[Alexander Suhovey]

Then sign it youself...

- Install Platdorm SDK or Windows Driver Kit.
- Use MAKECERT to create your own certificate.
- Use SIGNTOOL to sign and timestamp driver files.
- Add your cert to trusted root certs store on your computer.
- Install drivers, enjoy.

For more info refer to online WDK documentation (watch line wrapping):
http://msdn.com/library/en-us/DevIn..._a8832a63-b31c-49b4-af2e-2e595cf8fca6.xml.asp

You may also turn on kernel debugging which by default turns off driver
signing by running 'bcdedit -debug on' command but I'm not sure if it is a
good idea and if there are any implications in running in debug mode.
http://msdn.com/library/en-us/DevIn..._ef1cc06b-20f2-4621-a174-0cbed6ebbd71.xml.asp

More detailed links on code signing:

How to create a certificate with MAKECERT:
http://msdn.com/library/en-us/DevIn..._4bd1a456-81fb-490a-b377-ef7183fc1864.xml.asp

How to sign a driver using SIGNTOOL:
http://msdn.com/library/en-us/DevIn..._a5118a44-7b15-48c5-ba2e-9c2ca8446ace.xml.asp

 

[Guest]

Nice post, ut i have 1 question. Do I have to be a MSDN subscriber to use it?

 

[Alexander Suhovey]

Do I have to be a MSDN subscriber to use it?

Not nesessarily. All required tools are freely available. Code signing tools
are part of many development packages. Platform SDK and DDKs can be download
from Microsoft Download site while WDK is available for MSDN subscribers AND
on Microsoft Connect web site:
https://connect.microsoft.com/programdetails.aspx?ProgramDetailsID=517