Welcome to OGeek Q&A Community for programmer and developer-Open, Learning and Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
498 views
in Technique[技术] by (71.8m points)

c# 4.0 - How to get rid of "windows can't verify the publisher of this driver software" window?

How to get rid of the "Windows can't verify the publisher of this driver software" window? Policy setting didn't work.

I have tried the following suggested solutions however neither one has worked. I am working on Driver Validation test automation using C# language and I would like to avoid the user interaction while installing/uninstalling drivers. Could you please help me getting rid above security warning?

Two ways I have tried which did not work:

Command line:

  1. open the command line with "Run as Administrator" and excute the following commands:
    bcdedit.exe -set load options DDISABLE_INTEGRITY_CHECKS bcdedit.exe -set TESTSIGNING ON

  2. Restart your computer

Policy:

  1. Open gpedit.msc
  2. Expand User Configuration> Administrative Templates > System > Driver Installation
  3. In the right panel, double click on ‘Code Signing for Device Drivers’.
  4. Choose ‘Enabled’ in the window that appears. In the underlying options, choose ‘Ignore’. This disables drivers signing in Windows 7, and now you can install unsigned drivers in Windows 7.
  5. Click Apply, OK. Restart your computer to install unsigned drivers.

The solutions provided by the tech expert members didn't solve my problem. Can anybody provide a working solution? I would be highly appreciate it.

See Question&Answers more detail:os

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Reply

0 votes
by (71.8m points)

I was reading about this issue. Please refer Gizmo001 answer on social technet forum.

Import the certificates prior to install
Follow these steps:
1. install the software once manually by confirming that the unsigned drivers shall be used
2. go to %windir%inf and search for the latest OEM??.INF file; open it (notepad) and verify by its contents that this is the driver you wish to install automatically next time
3. go to %windir%system32catroot{any ID}OEM??.CAT (<- same number as in step 2); right click on this file, select properties, go to "Digital Signatures" tab, mark the certificate, click on details
4. on the next window click "Show Certificate"
5. on the next window open the "Details" tab and click "Save to File..."
6. collect this/all certificates
7. deploy these certificates
7.1 either in a batch /cmd script using "certutil.exe -f -addstore "TrustedPublisher" "MYFILE.cer" prior to setup
7.2 or by Group Policies (computer Policies Windows Security Public Key Policies add your files here )
8. run your setup just the way you wanted


与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
OGeek|极客中国-欢迎来到极客的世界,一个免费开放的程序员编程交流平台!开放,进步,分享!让技术改变生活,让极客改变未来! Welcome to OGeek Q&A Community for programmer and developer-Open, Learning and Share
Click Here to Ask a Question

1.4m articles

1.4m replys

5 comments

57.0k users

...