Kernel-Mode Code Signing Walkthrough

Updated: July 27, 2007
**
Download

Kernel-Mode Code Signing Walkthrough

DownloadKMCS_Walkthrough.doc
2.0 MB
Microsoft Word file
Updated: Jul 25, 2007
**

Kernel-mode software must be digitally signed to be loaded on x64-based versions of Windows Vista and later versions of the Windows family of operating systems. In addition, content protection policies for next-generation premium content might require signed kernel-mode software for certain configurations of x86-based systems.

This paper provides a beginning-to-end walkthrough of how to digitally sign both test and release versions of kernel-mode software.

This information applies to Windows 2000 and later versions of Windows.

Included in this paper:

Getting Started with Code Signing

Code Signing Tools Overview

How to Test Sign a Kernel Module

How to Install and Load a Test-signed Driver Package

How to Troubleshoot Test-Signed Drivers

How to Release Sign a Kernel Module

How to Install and Load a Release-signed Driver Package

How to Troubleshoot Release-Signed Drivers

How to Disable Signature Enforcement on a Test Computer


Top of pageTop of page