Windows7启动选项，允许忽略未签名的驱动程序 [英] Windows7 boot option to allow unsigned drivers ignored
问题描述
我正在学习Windows内核模式驱动程序开发。我编写了一个小型测试驱动程序，可以在VirtualBox中的VM下运行的Windows 7 32bit Ultima版本下成功注册，注销，加载和卸载。
I'm learning Windows kernel mode driver development. I've written a small test driver that I can successfully register, unregister, load and unload under Windows 7 32bit Ultima edition running under a VM in VirtualBox.
我的主机是Windows 7 64位家庭高级版。
My host is Windows 7 64bit Home Premium edition.
为64位编译的驱动程序无法在Windows 7家庭版下加载。我不断遭到拒绝，注意到该版本的Windows不允许未签名的驱动程序。
The driver, compiled for 64 bit, will not load under Windows 7 Home edition. I keep getting a rejection noticed that this version of windows does not allow unsigned drivers.
我尝试了两件事：
-
我使用F8启动选项允许未签名的驱动程序（无效）
I've used the F8 boot option to allow unsigned drivers (didn't work)
我以管理员身份运行CMD并执行以下两个命令
I run a CMD as administrator and execute the following two commands
bcdedit.exe -set loadoptions DDISABLE_INTEGRITY_CHECKS
bcdedit.exe -set loadoptions DDISABLE_INTEGRITY_CHECKS
bcdedit .exe设置TESTSIGNING上
bcdedit.exe -set TESTSIGNING ON
并重新启动。我的桌面显示我处于 TestMode状态，但仍然收到相同的拒绝通知。
and rebooted. My desktop shows me in "TestMode" but still I get same rejection noticed.
有人可以在这里帮助我，或者解释是否需要针对Home Edition采取其他措施吗？
Can anyone help me out here or explain if there is an additional step for Home edition?
---- {更新} ----
倾倒大量MSDN内容后，看来我的解决方案在于对我创建的驱动程序进行自我签名。我下载的DDK似乎没有进行自我签名的工具链。我已经下载了WinDDK-7600.16385.1。但是，令人感到奇怪的是，如果我只是简单地按F8 @引导时间，并告诉它允许未签名的驱动程序，那么我的Windows Ultima Edition会愉快地加载驱动程序。
----{ update }---- After pouring through tons of MSDN stuff, it would appear my solution lies in self signing the driver I created. The DDK I downloaded does not appear to have the tool chain to do self signing. I've downloaded WinDDK-7600.16385.1. But what is so strange is that my Windows Ultima Edition happily loads my driver if I simply F8 @ boot time and tell it to allow unsigned drivers.
推荐答案
您可以尝试驱动程序签名实施覆盖程序。。Windows7的64位版本支持该功能，并且据我证实，该报告确实可以在Windows 7上正常运行。 家庭高级版。
You might try the Driver Signature Enforcement Overrider. It's supported on 64-bit versions of Windows 7, and reports that I've seen confirm that it does indeed work on the "Home Premium" edition.
-
从链接下载应用程序下面。右键单击它，然后
选择以管理员身份运行。在
的主菜单中，按启用
测试模式按钮，然后按照屏幕上的
指示进行操作。
将启用TESTSIGNING模式，该模式允许加载
未经验证的系统文件。
Download the application from the link below. Right click on it and choose "Run as administrator". Inside its main menu, press on the "Enable Test Mode" button and follow the instructions on the screen. This will enable TESTSIGNING mode, which allows unverified system files to be loaded.
现在，您要做的就是添加
所需系统文件的未验证签名。为此，请从主菜单中的签署系统文件按钮
中按
，然后输入特定的
文件名，包括完整路径。以
为例：如果
C：\Windows\System32\驱动程序中的ATITool64.sys驱动程序由于执行驱动程序签名
而拒绝加载
，则应键入：
C：\Windows\System32\drivers\ATITool64.sys，
，如果您要签署的
比单个文件更多，只需重复此
过程直到完成，然后
最终重新启动。
Now all you have to do is to add the unverified signature to the required system files. To do so press on the "Sign a System File" button from the main menu, and enter specific filename including full path. For example: if ATITool64.sys from C:\Windows\System32\drivers refuses to load due to driver signature enforcement, you should type: "C:\Windows\System32\drivers\ATITool64.sys", and if you would like to sign more than a single file, just repeat this procedure until you’re done, and finally reboot.
启用测试模式并添加$ b后$ b签名到所需的系统
文件中，它们应该绕过Windows的
驱动程序签名强制实施，并加载
不会出现任何问题。但是，如果出于某些原因
对
感兴趣，则可以重新启动
应用程序，从主菜单中选择禁用测试
模式，然后重新启动。
如果您遇到问题或有
问题，请随时将其发布到我们的
论坛中。
After you enabled Test Mode and added signatures to the required system files, they should bypass Windows’s driver signature enforcement and load without any issues. However, if for some reason you are interested to revert it, you can re-launch the application, choose "Disable Test Mode" from the main menu, and reboot. If you encounter issues or having questions, feel free to post it on our forums.
注意： DSEO需要管理
权限（以管理员身份运行）。
Note: DSEO requires administrative privileges (Run as administrator).
它甚至允许您从自己的水印中删除水印桌面！
It even allows you to remove the watermark from your desktop!
这篇关于Windows7启动选项，允许忽略未签名的驱动程序的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
