[wdmaudiodev] Re: Driver signing

  • From: Tim Roberts <timr@xxxxxxxxx>
  • To: "wdmaudiodev@xxxxxxxxxxxxx" <wdmaudiodev@xxxxxxxxxxxxx>
  • Date: Wed, 27 Apr 2011 10:35:39 -0700

CS wrote:
> I'm wondering what I have to take into account when going through the 
> driver signing procedure for 64 bit. Are there any CAs that are 
> generally considered "better"? Prices seem all over the place, are there 
> hidden features I should look for?

Yes, you have to be very careful!  You MUST choose one of the CAs for
which Microsoft has a "cross-certificate".  Although there were
originally 6 acceptable CAs, because of business consolidation, there
are now effectively two:  Verisign and GlobalSign.

http://msdn.microsoft.com/en-us/windows/hardware/gg487315.aspx

You must get a Class 3 Code-Signing certificate.  The vendor's page
should mention KMCS.  In addition, if you intend to submit your driver
to WHQL, you must have a Verisign certificate to create the account.  No
other CA will do.  That certificate doesn't have to be a code-signing
cert, so some people get a cheap Verisign cert for WHQL, and a
GlobalSign cert for code-signing.

-- 
Tim Roberts, timr@xxxxxxxxx
Providenza & Boekelheide, Inc.

******************

WDMAUDIODEV addresses:
Post message: mailto:wdmaudiodev@xxxxxxxxxxxxx
Subscribe:    mailto:wdmaudiodev-request@xxxxxxxxxxxxx?subject=subscribe
Unsubscribe:  mailto:wdmaudiodev-request@xxxxxxxxxxxxx?subject=unsubscribe
Moderator:    mailto:wdmaudiodev-moderators@xxxxxxxxxxxxx

URL to WDMAUDIODEV page:
http://www.wdmaudiodev.com/

Other related posts: