Jump to content
LaptopVideo2Go Forums
Sign in to follow this  

Why not sign your INF's?

Recommended Posts


I know a guy who is doing a unofficial service pack 4 for XP and I had a couple drivers INF that I updated and needed to be signed, so I asked him if he could do it and he did... All that was needed after this was to apply a REG file to make the certificate he uses 'Trusted' and then one can install the INF without the need to Disable Driver Signature Enforcement


Here are the drivers in case you think this would be a good idea


MD5: 1f4767332798a2f57cbca2baeab9d659
Size: 8.50

Share this post

Link to post
Share on other sites

does this tip apply to Windows versions like Vista, 7 & 8.x?  what about XP?

Share this post

Link to post
Share on other sites

The INF and files are signed for Vista and 7 x86/x64, I asked him to leave out XP because there was no need for it


These are some instructions on how he does the signing



Share this post

Link to post
Share on other sites

OK so I found a pretty EASY way to create a PFX for use with signing drivers, its SelfCert


1- Use SelfCert to generate your PFX, input these into the dialog boxes


x.500 distinguished name: cn=name_here,o=org_here,e=email@example.com

Key size: 2048

Valid from: today

Valid to: your choice (5-10 yrs is good IMO)


Now put in a password in and save as PFX


Here is a example list from a WHQL cert with other optional information you can use in distinguished name selfcert box:

CN = Microsoft Windows Hardware Compatibility PCA
O = Microsoft Corporation
L = Redmond
S = Washington
C = US

E = Your Email


OK now that you have your PFX, you can generate a CAT for your modded driver and sing it (you will need the latest Windows Driver Kit)


Re-generate a new CAT with Inf2Cat

Inf2Cat /driver:<path_to_folder_with_INF_&_Files> /os:Vista_X86,Vista_X64,Server2008_X86,Server2008_X64,7_X86,7_X64,Server8_X64,8_X86,8_X64,Server6_3_X64,6_3_X86,6_3_X64

Sign the new CAT with your PFX

signtool sign /f <filename>.pfx /p <password> "<path_to_folder>\nv_disp.cat"

Finally timesamp your CAT

signtool timestamp /t http://timestamp.verisign.com/scripts/timstamp.dll "<path_to_folder>\nv_disp.cat"

Now what you need to do, is get the cert from your PFX, install it in the Trusted Root Cert. Auth. and get the reg from this to give to users to apply


If the admin needs help with this I would be willing to help over Skype, PM me if interested


Share this post

Link to post
Share on other sites

I'll have a closer look at this once i get my self sorted with new ISP, currently surfing via Cellphone, bit cumbersome

Taking a bit of time to get it setup.

definitely very interesting stuff

Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this