Re: [WiX-users] Difx, Authenticode and Driver Signing
To be perfectly clear, you are trying to bypass a feature that was put in place to protect users. I don't work with drivers and don't really know a whole lot about them, in general, but I don't think you'll get a lot of support trying to hack around the protection. The whole thing sounds pretty sketchy to me. What product are you shipping? It really doesn't sound like something I want to install on my machine or have my Mom install. - From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shmarya Rubenstein Sent: Thursday, July 27, 2006 1:59 AM To: Stefan Pavlik Cc: wix-users@lists.sourceforge.net Subject: Re: [WiX-users] Difx, Authenticode and Driver Signing Unfortunately, WHQL signing is not an option I know its not a good practice, but if there's any way to do it... :) - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Difx, Authenticode and Driver Signing
There is no public APIs to adjust driver signing policy from the application. Even though there are some hacks for that, it is a tempering for operating systems and highly discouraged. The only right way to achieve your goal is to get WHQL certification. Authenticode signing is also applicable only for Windows 2003 Server or later platforms. Regards, Chesong Lee From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shmarya Rubenstein Sent: Wednesday, July 26, 2006 6:32 AM To: wix-users@lists.sourceforge.net Subject: [WiX-users] Difx, Authenticode and Driver Signing Hi all, I have a driver package which I'm installing using DifX and WiX. For various reasons (Cash, Time, Confidentiality...) I can't submit the driver to WHQL for certification. I would, however, love to get rid of the annoying boxes which are displayed during installation to warn [read: iritate] the user. I read on various WDK/DDK pages that Authenticode signing the drivers should do the trick, but it seems that this is only applicable to Windows Server 2003+, which kinda sucks for my Win2K and XP users... BTW: I only found out that it doesn't work for XP and 2K, after purchasing a Thawte certificate and signing all the drivers - bleh :P. I know that it is possible to ignore these warnings globally by changing a setting on the computer manually. I've also seen installations for drivers which automatically turn driver signing warnings off for the duration of the installation, and turn it back on when they're done. Does anyone know how to acheive this? Better yet, have I made a mistake with my authenticode signing? Thanks, -- Shmarya --- [EMAIL PROTECTED] - http://shmarya.net NUnit rocks! http://nunit.com - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Difx, Authenticode and Driver Signing
Hi,... we had similar problem in our project. I have never seen installation which turns the driver signing off and on. http://support.microsoft.com/?kbid=298503 Our solution was to create appliaction ( using AutoIt - http://www.autoitscript.com/autoit3/) to automaticaly answer theese dialogs. This solution was no so nice, but works OK (problem was to collect the text translations used by MS to detect the correct window). Now our driver is digitaly signed and the original problem (and not very nice solution) is gone. regards Stefan Shmarya Rubenstein wrote: Hi all, I have a driver package which I'm installing using DifX and WiX. For various reasons (Cash, Time, Confidentiality...) I can't submit the driver to WHQL for certification. I would, however, love to get rid of the annoying boxes which are displayed during installation to warn [read: iritate] the user. I read on various WDK/DDK pages that Authenticode signing the drivers should do the trick, but it seems that this is only applicable to Windows Server 2003+, which kinda sucks for my Win2K and XP users... BTW: I only found out that it doesn't work for XP and 2K, after purchasing a Thawte certificate and signing all the drivers - bleh :P. I know that it is possible to ignore these warnings globally by changing a setting on the computer manually. I've also seen installations for drivers which automatically turn driver signing warnings off for the duration of the installation, and turn it back on when they're done. Does anyone know how to acheive this? Better yet, have I made a mistake with my authenticode signing? Thanks, -- Shmarya --- [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] - http://shmarya.net NUnit rocks! http://nunit.com - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV __ NOD32 1.1679 (20060726) Information __ This message was checked by NOD32 antivirus system. http://www.eset.com ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users __ NOD32 1.1679 (20060726) Information __ This message was checked by NOD32 antivirus system. http://www.eset.com -- Stefan Pavlik | [EMAIL PROTECTED] Whitestein Technologies | www.whitestein.com Panenska 28 | SK-81103 Bratislava | Slovak Republic Tel +421(2)5930-0735 | Fax +421(2)5443-5512 - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Difx, Authenticode and Driver Signing
Unfortunately, WHQL signing is not an optionI know its not a good practice, but if there's any way to do it... :)On 7/27/06, Stefan Pavlik [EMAIL PROTECTED] wrote:Hi,...we had similar problem in our project. I have never seen installation which turns the driver signing offand on.http://support.microsoft.com/?kbid=298503Our solution was to create appliaction ( using AutoIt - http://www.autoitscript.com/autoit3/)to automaticaly answer theese dialogs.This solution was no so nice, but works OK (problem was to collectthe text translations used by MS to detect the correct window). Now our driver is digitaly signed and the original problem (and notvery nice solution) is gone.regardsStefanShmarya Rubenstein wrote: Hi all, I have a driver package which I'm installing using DifX and WiX. For various reasons (Cash, Time, Confidentiality...) I can't submit the driver to WHQL for certification. I would, however, love to get rid of the annoying boxes which are displayed during installation to warn [read: iritate] the user. I read on various WDK/DDK pages that Authenticode signing the drivers should do the trick, but it seems that this is only applicable to Windows Server 2003+, which kinda sucks for my Win2K and XP users... BTW: I only found out that it doesn't work for XP and 2K, after purchasing a Thawte certificate and signing all the drivers - bleh :P. I know that it is possible to ignore these warnings globally by changing a setting on the computer manually. I've also seen installations for drivers which automatically turn driver signing warnings off for the duration of the installation, and turn it back on when they're done. Does anyone know how to acheive this? Better yet, have I made a mistake with my authenticode signing? Thanks, -- Shmarya --- [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] - http://shmarya.net NUnit rocks! http://nunit.com - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV __ NOD32 1.1679 (20060726) Information __ This message was checked by NOD32 antivirus system. http://www.eset.com ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users __ NOD32 1.1679 (20060726) Information __ This message was checked by NOD32 antivirus system. http://www.eset.com--Stefan Pavlik | [EMAIL PROTECTED]Whitestein Technologies | www.whitestein.comPanenska 28 | SK-81103 Bratislava | Slovak Republic Tel +421(2)5930-0735 | Fax +421(2)5443-5512-- Shmarya--- [EMAIL PROTECTED] - http://shmarya.netNUnit rocks! http://nunit.com - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
