Home > Windows 10 > Creating A Driver Catalog File

Creating A Driver Catalog File


Signability calculates a hash for each file in the package and places the hash into the catalog file. Result = 80070001, (-2147024895) when creating authenticode cert and running the bellow command with all my details MakeCert.Exe -r -pe -n CN= Since we want to have the full certification chain in our .cer, with all the intermediate certificates, we must edit the .pem to remove all the Bag Attributes sections, except the Contact GitHub API Training Shop Blog About © 2017 GitHub, Inc. this content

Some of these URLs are: http://timestamp.verisign.com/scripts/timstamp.dll (Verisign) http://timestamp.globalsign.com/scripts/timstamp.dll (GlobalSign) Additional Certificate While the Windows certificate store has both the GlobalSign and Verisign root CA certificates as Trusted Root Certification Authorities, these The next step then is to reference that executable from your application intaller. CatalogDefinitionFileName..cdf is the name of the catalog definition file. Additional considerations To start a WDK Build Environment command prompt with the Run as administrator option, click Start, All Programs, Windows Driver Kits, WDK , Build Environments, and Windows https://msdn.microsoft.com/en-us/windows/hardware/drivers/install/using-inf2cat-to-create-a-catalog-file

Inf2cat Download

If you look at the binaries' properties, you will see that they have already been signed by the libusb-win32 developers. Click Go to start the analysis and catalog creation. You must do this even if the driver binaries do not change. One of the parameters given to this tool is the list of OS’s the generated catalog will need to support.

[email protected] Please log in to comment 0 First of all, really nice guide Captain planet. And because signtool expects a different input, an extra step is introduced: A PFX file needs to be generated with the PVK and SPC files. To specify additional attributes, you must use separate CATATTR options, with each option assigned a unique numeric digit as a suffix. Makecat The option is likely redundant, as we don't export anything from the end user part, but you obvioulsy don't want to run the risk of your private key being revealed.

For example, the following Inf2Cat command verifies that the driver package can be signed for Windows 2000 and the x86 versions of Windows Vista, Windows Server 2003, and Windows XP. Inf2cat Windows 10 Testing driver package... Windows 8 computers require INF files to be signed before they can be installed onto a machine. https://msdn.microsoft.com/en-us/windows/hardware/drivers/install/creating-a-catalog-file-for-a-pnp-driver-package Before setting everything up in Inno Setup or NSIS (Nullsoft Scriptable Install System) it may be a good idea to test the various parameters you want to feed to wdi-simple.

Microsoft provides a tool to sign the INF’s, called SignTool. Install Inf2cat Before you use Inf2Cat, you must make sure that the INF file's DriverVer directive has a current time stamp and version value. If you aren’t distributing the INF to your customers and only need to use it on your own machine, this process is not feasible (unless you are buying the certificate for For more information about how to use the MakeCat tool, see Creating a Catalog File for a Non-PnP Driver Package.

Inf2cat Windows 10

CATATTR1=0x10010001:OSAttr:2:6.0Specifies an attribute of the catalog file. https://msdn.microsoft.com/en-us/windows/hardware/drivers/install/catalog-files Preferably you want to sign all the driver files, including the DLLs, but technically, only the .sys should be required. Inf2cat Download One or more Windows versions may be specified in the /os: option. How To Install .cat File As to the driver installer executable that, can be referenced from the Inno Setup/NSIS installer, we will make use of wdi-simple from the libwdi samples since it contains everything we require

Anyway. Answered 10/12/2010 by: captain_planet Please log in to comment Please log in to comment 0 Nice Tutorial/ Notes. Answers 2 awesome work, thanks for posting! For more information about how to create catalog files, see Creating a Catalog File for a Test-Signed Driver Package. Inf2cat Tool Download

Have i got a old makecert.exe? Device Management and Installation Operations Guide Securing Device Driver Packages with Digital Signatures Signing Device Driver Packages Signing Device Driver Packages Create the Catalog File to Contain the Signature Create the If the driver package is installed by using an INF file, use the Inf2Cat tool to create the catalog file. http://asmwsoft.net/windows-10/create-driver-catalog-file.html For more information about this procedure, see Test-Signing a Driver through an Embedded Signature.

The .pfx file needs to be around the size of 7.4K if it has the correct chain of certificates to make XP happy. Inf2cat Os Windows 10 Captain Planet. If you don't timestamp, then you will have to provide your users with updated drivers files, and ask them to upgrade drivers every time your original certificate expires.

They only provide SSL Certs and Code Signing certificates.

Makecat saves Good.cat in the same folder where File1 and File2 are located. Each thumbprint corresponds to a file that is included in the collection. In this example, the INF file of the ToastPkg sample driver package is used. Inf2cat Is Not Recognized cannot be a stand-alone file in the C drive).

To create a catalog file, you must first manually create a Catalog Definition File (.cdf) that describes the catalog header attributes and file entries. Once it is found, you can copy (or cut) and paste it under the Trusted Root Certification Authorities. Example:SignCode.Exe -spc "c:\PlaneteersLtd_certificate\PlaneteersLtd.spc" -v "c:\PlaneteersLtd_certificate\PlaneteersLtd.pvk" -t http://timestamp.verisign.com/scripts/timstamp.dll "C:\cpdriver\captainplanet.cat" ********************************************** *****ADDING THE CUSTOMER CERTIFICATE********** ********************************************** The catalog for our driver is now signed. Catalog Files and Digital Signatures 2017-4-20 2 min to read Contributors In this article A digitally-signed catalog file (.cat) can be used as a digital signature for an arbitrary collection of

The INF already has the name of cat file to generate.
: The OS to support: e.g. 2000, XP_X86, Vista_X64, 7_X86, 8_X64, 10_X86, 10_X64, etc. If required, you can of course customize the wdi-simple.c source or create your own libwdi based driver installer executable. For example, the following Inf2Cat command verifies that the driver package can be signed for the x64 versions of Windows Vista, Windows Server 2003, and Windows XP. Number of files successfully Verified: 0 Number of warnings: 0 Number of errors: 1 C:\WinDDK\7600.16385.1\bin\amd64> Where did i wrong?

The only addition we make to the parameters above is the addon of the installer HWND handle ({wizardhwnd} for Inno Setup, $HWNDPARENT for NSIS) to the --progressbar option, as it allows Bf9+9VGAoBY42LaAoFFPrPaY -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID+DCCAuCgAwIBAgILBAAAAAABHkSl4k4wDQYJKoZIhvcNAQEFBQAwVzELMAkG ................................................................