廉价的Windows驱动程序签名的64位Windows 7 [英] Cheap Windows driver signing for 64 bit Windows 7

问题描述

我需要在Windows 7 64上安装 libusb-win32 驱动程序位机。这个驱动程序是开源的，所以它没有数字签名，所以我想自己这样做，但我想知道这是否可以做，不用付出很多钱。是否可以使用未由 Verisign 或 GlobalSign ？可能是自签名的，还是使用 StartSSL ？

I need to install the libusb-win32 driver on Windows 7 64 bit machines. This driver is open source so it is not digitally signed so I want to do this myself, but I wonder if this can be done WITHOUT paying lot of money. Is it possible to use a certificate which is NOT signed by Verisign or GlobalSign? Maybe self-signed or by using StartSSL instead?

如果是，我该怎么办？根据操作方法， 关于x64内核驱动程序签名的实用真相 ，我必须使用交叉证书（并且只有Microsoft在Microsoft列表中有六个，大多数是针对不再活动的CA）。

And if yes, how do I do it? According to a how-to, The Practical Truth About x64 Kernel Driver Signing, I have to use a "cross-certificate" (and there are only six available on the Microsoft list and most of them are for CAs which are no longer active).

我不在乎用户是否遇到警告消息。如果用户必须首先安装特殊的 CA 证书，我甚至可以接受。我只需要驱动程序运行，而不必手动禁用每次Windows启动时的签名检查。

I don't care if the user is confronted with a warning message. I can even accept if the user has to install a special CA certificate first. I only require that the driver runs without manually disabling the signature check on each Windows startup.

推荐答案

否，驱动程序必须由这些特定证书中的一个交叉签名，因此驾驶员必须由那些CA中的一个签名。您可以在计算机上禁用驱动程序签名以进行测试，但显然您不想在生产计算机上执行此操作。对不起，这只是它的方式。

No, the driver has to be cross signed by one of those specific certificates and thus the driver has to be signed by one of those CAs. You can disable driver signing on the machine for testing purposes, but obviously you don't want to do this on production machines. Sorry, that's just the way it is.

这篇关于廉价的Windows驱动程序签名的64位Windows 7的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！