Self signed Driver Signing / Code Signing Certificate (Windows 10, OpenSSL)
Budget €30-250 EUR
Edit:
Thanks to Senthilnathan and Kostia I know that it is infact not possible except by using "Test-Mode" in Windows.
Thank you both a lot!
Hello everyone,
for a private project I have created a custom USB Driver.
Unfortunately Windows requires a Driver Signing Certificate in order to install and run the driver.
It is possible to deactivate this feature until the next reboot but this will compromise my computers security and it is quite annoying. (Driver Signature Enforcement)
It should be possible to create a custom CA chain and self sign a certificate in order to sign my driver. (I will have to manually add the CA to the trusted root CA store in Windows.)
The Goal:
Create a openssl config and define a process for createing a CA chain (Root and Intermediate) that allowes me to sign my driver. After I add both CAs to the trusted certificate store the driver should run without changeing any policy.
Why not just buy a driver signing certificate?
I wish it would be that simple :D Unfortunately I require a EV certificate. The only way of obtaining one is to verifiy "my company" and purchase one. The price of the certificate is not the issue. Rather, I have to create a new company, pay the fees, more taxes and general overhead just to be able to sign a hobby project that won't generate any money.
Please feel free to contact me if you require more information.
3 freelancers are bidding on average €128 for this job
Hello I think, you can create self signed certificate using powershell for this purpsoe - New-SelfSignedCertificate Another way is using provision mechanism in driver development cycle in VS. Sorry, for some typos.
