signing driver that is load up via service

Hi,

I have a driver that's loaded up via service manager. This driver
doesn't have an ini or inf file. and is loaded up using the "sc ......
binpath=c:\mydriver.sys ..."

In Vista 64, when I did this, it says "unsigned driver", but since I am
hooked up Windbg, everything works fine, until I run in without the debugger.
So my question :-

(1) Is it possible to sign a driver that doesn't have an ini or inf
file ?
(2) If I were to create a dummy inf and cat file, will the
load-driver-via-services method still work the same way ?

- Pat

"Pat" <> wrote in message
news:71537076-64D1-4C12-A81B-...
> Hi,
>
> I have a driver that's loaded up via service manager. This driver
> doesn't have an ini or inf file. and is loaded up using the "sc ......
> binpath=c:\mydriver.sys ..."
>
> In Vista 64, when I did this, it says "unsigned driver", but since I am
> hooked up Windbg, everything works fine, until I run in without the
> debugger.
> So my question :-
>
> (1) Is it possible to sign a driver that doesn't have an ini or inf
> file ?

Yes, just sign the driver binary itself with signtool. In order for the
driver to be loaded in Vista x64 and later, you need to sign and cross-sign
the driver, as explained in the kernel mode code signing walkthru, step 6 on
page 42.

http://www.microsoft.com/whdc/winlog...lkthrough.mspx

Hope it helps
GV


> (2) If I were to create a dummy inf and cat file, will the
> load-driver-via-services method still work the same way ?
>
> - Pat
>

> (1) Is it possible to sign a driver that doesn't have an ini or inf
> file ?

Yes. With a cross-certificate.

More so, this is mandatory for boot-start drivers.

--
Maxim S. Shatskih
Windows DDK MVP

http://www.storagecraft.com