: 3 serial number: 04:00:00:00:00:01:15:4B:5A:C3:94 issuer name : C=BE, O=GlobalSign nv-sa, OU=Root CA
2024-07-10 08:06
我们使用CyPress USB控制器为我们自己的产品，应该在Windows Vista／7 64位下工作。正如我在这个论坛中发现的，我们需要一个来自Vista的X64操作系统的签名驱动程序。现在我想知道我需要给司机签名的步骤。我想给司机签字，因为（如果我没有错的话）费用不算太高（根据我在这里发现的，证件费99美元）。我从微软指南中了解内核模式代码签名演练：如何：1）从商业CA（证书AutoMy）中获取软件发布者证书（SPC）；2）从驱动文件（.sys）和驱动程序设置信息文件（.INF）创建.CAT文件；3）使用SPC到签署CAT文件，以便能够在Windows Vista／7 64位下使用驱动程序。安装CyPress USB通用驱动程序（3.4.6），我得到了CySUBSIS和CySUB.IF文件（在C:\程序文件\ CyPress \ CyPress套件USB 3.4.6\驱动程序\ WLH）。这些工作对我们的产品（目前只禁用司机签名执法）。现在，我觉得错过了一些信息，我需要有自己的签名驱动程序，将与我们的XXX产品，以便一旦我们的产品插入到一台计算机上安装了驱动程序，产品被自动识别为XXX产品。首先，我想我必须改变USB控制器和CysB.IF的VID和PID，不是吗？我想这些值必须由微软提供，我不能使用任何值，不是吗？在这种情况下，我如何从微软获得它们？那么，如果我不修改CysB.SIS驱动程序，我是否需要遵循赛普拉斯指出的具有WHQL证书的程序？如果我不需要这个WHQL签名过程，我是否应该简单地遵循内核模式代码的签名，提供我的微软？请尽可能详细地描述不同场景所需的步骤。 以上来自于百度翻译 以下为原文We use Cypress USB controllers for an our own product that should work under Windows Vista/7 64-bit. As I discovered in this forum we need a signed driver for x64 OS from Vista on. Now I would like to know the step I need to sign the driver. I would like to sign the driver because (if I'm not wrong) the cost is not too high (according to what I found here the certificate costs 99$). I learned from the Microsoft guide on kernel-mode code signing walkthrough how to: 1) obtain a Software Publisher Certificate (SPC) from a commercial CA (Certificate Autorithy); 2) create a .CAT file starting from the driver file (.SYS) and the driver setup information file (.INF); 3) use the SPC to sign the CAT file in order to be able to use the driver under Windows Vista/7 64-bit. Installing Cypress USB Generic Driver (3.4.6) I got the cyu***.sys and cyu***.inf files (under C:\Program Files\Cypress\Cypress Suite USB 3.4.6\Driver\wlh). These work fine for our product (for the moment only disabling the driver signature enforcement). Now I feel to miss some information on the steps I need to have our own signed driver that will work with our XXX product so that once plugged in our product to a computer that has the driver installed, the product is automatically recognized as the XXX product. First of all I guess I have to change on the USB controller and on the cyu***.inf the VID and the PID, isn't it? I guess these values have to be provided by Microsoft and I cannot use any values, isn't it? In this case how do I get them from Microsoft? Then if I do not modify the cyu***.sys driver do I need to follow the procedure that Cypress indicates for having the WHQL certificate? If I do not need this WHQL signing procedure, should I simply follow the instructions on thekernel-mode code signing walkthrough provided my Microsoft? Please details as much as possible the steps needed for different scenarios.
2019-05-22 12:05
