1

Topic: EV the certificate for the driver signature in Windows 10

All greetings, always signed the driver the normal certificate from DigiCert while Microsoft did not let out 1607 version for 10 Windows. And so, if the user with this OS in  installs option Security Boot all my signatures at loading of Windows from drivers fly. Therefore at me a question - and if to use them EV the certificate for the signature? Whether switching-on of that option will influence it? I communicated with support from DigiCert, there told - that one EV the certificate enough and switching-on of that option should not influence. And here at me doubt, all as that is simple at them it turns out. Perhaps who already tried to use it in practice, impart experience?

2

Re: EV the certificate for the driver signature in Windows 10

Hello, Vicul, you wrote: V> Perhaps who already tried to use it in practice, impart experience? EV - there is more to come. Drivers should be signed not signtool, and through a special web portal, packing them in cab-archives. All procedure occupies approximately 15-20 minutes.

3

Re: EV the certificate for the driver signature in Windows 10

O> EV - there is more to come. Drivers should be signed not signtool, and through a special web portal, O> packing them in cab-archives. All procedure occupies approximately 15-20 minutes. And it is possible more in detail, what for a portal, the Macrosoftware or Digicert? Is where it is all explicitly it is painted on steps?

4

Re: EV the certificate for the driver signature in Windows 10

5

Re: EV the certificate for the driver signature in Windows 10

6

Re: EV the certificate for the driver signature in Windows 10

7

Re: EV the certificate for the driver signature in Windows 10

Hello, CaptainFlint, you wrote: CF> If briefly: CF> 1. The driver gathers,  subscribes. CF> 2. It is packed in CAB, this CAB subscribes the EV-certificate (mandatory). CF> 3... By the way, now EV it is necessary only for account registration. And further it is possible to load in a profile normal (not EV) the certificate and to sign it cab-archives. CF> I sent for the signature rather for a long time, since then Microsofts entered any new  and is, seemingly, strong . CF> As a result, now in old  already there is no option to send the driver, there is only a link on new, and new thus CF> is not loaded (the empty page which goes in cycles in them  oauth logins-redirects) opens. I too had problems with an input in a new portal, wrote to technical support MS, in due course repaired. Also sign now much faster than earlier (now on the average minutes 10-20, earlier hour-one and a half).

8

Re: EV the certificate for the driver signature in Windows 10

Hello, Vicul, you wrote: V> the idea as a whole is clear, somebody else can  on  share. I here almost on steps painted: http://www.cyberforum.ru/drivers-progra … 93186.html

9

Re: EV the certificate for the driver signature in Windows 10

Hello, okman, you wrote: O> By the way, now EV it is necessary only for account registration. O> and further it is possible to load in a profile normal (not EV) the certificate and to sign it cab-archives. Interesting, did not hear about the such. Till now all  that came across to me, demanded the EV-signature for cab. Thanks for , I will mean. O> I too had problems with an input in a new portal, wrote to technical support MS, in due course repaired. O> also sign now much faster than earlier (now on the average minutes 10-20, earlier hour-one and a half). Probably, as carries. From me on old  no more than 10 minutes occupied signing.

10

Re: EV the certificate for the driver signature in Windows 10

Hello, okman, you wrote: O> Hello, Vicul, you wrote: V>> the idea as a whole is clear, somebody else can  on  share. O> I here almost on steps painted: O> http://www.cyberforum.ru/drivers-progra … 93186.html Thanks that is necessary!

11

Re: EV the certificate for the driver signature in Windows 10

. O> I here almost on steps painted: O> http://www.cyberforum.ru/drivers-progra … 93186.html And here one more question under the new certificate, you write the new signature will work only on 10, on other OS is not present, the reason I do not support SHA256. But on 8 Windows this support is, and here on 7 Windows put a special patch for this purpose. At me now all  and  are signed by the double certificate. Works on all OS.

12

Re: EV the certificate for the driver signature in Windows 10

Hello, Vicul, you wrote: V> And here one more question under the new certificate, you write the new signature will work only on 10, on other OS is not present, the reason I do not support SHA256. V> But on 8 Windows this support is, and here on 7 Windows put a special patch for this purpose. There it is not said that the reason in SHA256. The reason that the appropriate root certificate is considered entrusted only in ten.

13

Re: EV the certificate for the driver signature in Windows 10

CF> There it is not said that the reason in SHA256. The reason that the appropriate root certificate is considered entrusted only in ten. Thanks, now understood