Saturday, May 21, 2011

Cross Certificates Problem on Windows7 for driver signing

Leave a Comment
If you are signing a driver on Windows 7, you might landup in getting errors related to incomplete certificate chain.

The solution is to install two additional certs:

1. Save the cert from this URL as .cer and run it to install this alternate CA cert:
https://knowledge.verisign.com/support/code-signing-support/index?page=content&actp=CROSSLINK&id=AR1575
2. If you are using verisign certs, download and extract this file and keep the cer file in the signing directory:
http://download.microsoft.com/download/d/7/f/d7fea3df-4e87-4f8e-b748-212334653028/_MSCV-VSClass3.exe

3. Use the signtool command line as:
signtool sign /ac MSCV-VSClass3.cer /f /p /t  http://timestamp.verisign.com/scripts/timstamp.dll

For certs from our SSL cert providers, refer to my earlier post and search for "cross certificates for Microsoft authenticode"

0 comments: