Tech Support > Microsoft Windows > Drivers > 64-bit Vista and driver cross signing
64-bit Vista and driver cross signing
Posted by Carlin on June 7th, 2006


Hello,

I'm attempting to set up file signing for 64-bit Vista, which requires that
drivers be additionally signed with a cross certificate from Microsoft. I've
obtained this certificate, but am having trouble signing files with
SignTool.exe.

Our current signing uses SignCode.exe with the following command line:

signcode.exe -spc MyCredentials.spc -v MyPrivateKey.pvk -a SHA1 -t
http://timestamp.verisign.com/scripts/timstamp.dll” targetfile.sys -i
"http://www.symantec.com" -n “Some Text”

We are now trying to update to use the SignTool.exe included in the Vista
Beta2 WDK (we have the updated SignTool.exe that does cross certificates
properly), but are having difficulty getting this to work correctly. I’m not
sure if it’s possible using SPC and PVK files.

All of my attempts result in SignTool telling me that it could not find a
certificate matching my criteria.

Could someone offer an equivalent SignTool.exe command line (as compared to
our SignCode.exe command line) including the cross certificate?

Thanks,
Carlin

Posted by Gary G. Little on June 7th, 2006


Take a look at the Vista 64bit signing discussion in the OsrOnline/NtDev
discussion group.

www.OsrOnline.com

--
The personal opinion of
Gary G. Little

"Carlin" <Carlin@discussions.microsoft.com> wrote in message
news:F1582972-86DB-4369-A429-547E95351CE3@microsoft.com...