驱动程序/代码签名 [英] Driver/Code signing

问题描述

说实话，我自己也不知道该放在哪里，但我将其放在这里，因为签名过程需要VS的signtool。对于签名和数字证书，我有点困惑。

To be honest, I myself have no idea where to put this, but I'm putting this in here since the signing process requires VS's signtool. I am a bit confused here regarding signing and digital certificate.

如果我错了，请纠正我。

Correct me if I am wrong.

1 ）有两种类型的签名：代码签名和驱动程序签名。驱动程序必须执行后者，而最终用户软件只需要执行代码签名。

1) There is two types of signing : code signing and driver signing. Driver must do the latter, while end-user software only needs to do the code signing.

2）驱动程序签名需要来自VeriSign，GlobalSign等来源的数字证书。在进行代码签名时，我们可以使用我们自己生成的公钥来生成自己的证书。

2) Driver signing requires a digital certificate from sources like VeriSign, GlobalSign. While for code signing, we can generate our own certificate using our own generated public key.

我是否理解正确？

推荐答案

前段时间，我学习了使用内核模式代码签名演练的驱动程序签名 http://msdn.microsoft.com/en-us/library/windows/hardware/gg487328.aspx （可作为doc文件下载）。我从未听说过内核模式驱动程序的代码签名。对于驱动程序，有两种签名类型：测试签名和发布签名。测试签名用于开发过程，Win7和Vista 64位仅在特殊模式下允许测试签名驱动程序。发布标志用于生产发布，需要购买数字证书。发行签名的驱动程序可以不受限制地安装在任何Windows版本中。

Some time ago I learned driver signing using Kernel-Mode Code Signing Walkthrough http://msdn.microsoft.com/en-us/library/windows/hardware/gg487328.aspx (available for download as doc file). I have never heard about code signing of kernel-mode drivers. For drivers, there are two signing types: test-sign and release-sign. Test-sign is used for development process, Win7 and Vista 64 bit allow test-signed drivers only in special mode. Release-sign is used for production release and requires purchasing digital certificate. Release-signed driver can be installed in any Windows version without restrictions.

内核模式代码签名演练包含有关测试和发布内核模式驱动程序的分步说明。

Kernel-Mode Code Signing Walkthrough contains step-by-step instructions for test and release-signing of kernel-mode drivers.

这篇关于驱动程序/代码签名的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！