在提交PC设备清单包时，验证是错误（“SignatureValidationFailed”） [英] Validation is Error ("SignatureValidationFailed") , While Submitting a PC device manifest package

问题描述

我们提交一个PC设备清单包。结果是验证错误（"SignatureValidationFailed"）。

We Submit a PC device manifest package. As a result is Validation Error ("SignatureValidationFailed") .

我们制作包含以下文件的包

We make package including below files

DeviceInformation\DeviceInfo.xml

DeviceInformation\DeviceInfo.xml

DeviceInformation\our.ico

DeviceInformation\our.ico

WindowsInformation\WindowsInfo.xml

WindowsInformation\WindowsInfo.xml

PackageInfo.xml

PackageInfo.xml

并签署* devicemetadata-ms 使用signtool.exe。

and sign the *devicemetadata-ms  with signtool.exe.

signtool.exe" sign / v / fd sha1 / du" Electronics Inc." / t"http：//timestamp.verisign.com/scripts/timstamp.dll" / f signsha2.pfx  * devicemetadata-ms 

signtool.exe" sign /v /fd sha1 /du "Electronics Inc." /t "http://timestamp.verisign.com/scripts/timstamp.dll" /f signsha2.pfx  *devicemetadata-ms 

签名成功且没有错误。

我们运行signtool veify并显示错误 

We run signtool veify and show error 

您能告诉我如何解决设备元数据包签名错误吗？

Could you tell me how to resolve the device metadata package signing error ?

---------------------- -------------------------------------------------- ---------------

---------------------------------------------------------------------------------------

----------------------------- -------------------------------------------------- --------

---------------------------------------------------------------------------------------

推荐答案

要验证的第一件事是您公司的签名证书已在Microsoft硬件开发人员中心仪表板上注册。 如果您在向Microsoft提交可能存在问题时遇到验证错误。 也可能是
你没有注册EV证书（你想要一个EV证书和你在仪表板上注册的实际证书）。

The first thing to verify is that your Company's signing certificate is registered on the Microsoft Hardware Dev Center Dashboard.  If you're having a validation error when submitting to Microsoft that might be the problem.  It might also be that you don't have an EV certificate registered as well (you want both an EV certificate and the actually certifiate you're signing with registered on the Dashboard).

我不认为"signtool验证"这是有意义的，因为当我在我的环境中对正确签名的文件运行时，我得到相同的错误（可能是因为它在链中没有"交叉证书"？ 虽然因为
我们正在处理在此处使用Authenticode验证，请尝试将/ pa添加到"signtool verify"：

I don't think the "signtool verify" is meaningful here as when I run that against correctly signed files in my environment I get the same error (probably because it doesn't have the "cross certificate" in the chain?  Although since we're dealing with Authenticode verification here, try adding /pa to the "signtool verify":

    signtool.exe verify / pa< your-file>

    signtool.exe verify /pa <your-file>

这篇关于在提交PC设备清单包时，验证是错误（“SignatureValidationFailed”）的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！