Re: [WiX-users] Difx, Authenticode and Driver Signing

2006-07-28 Thread jhewes 

Although I've never looked for it, I can't imagine that there would be any
API call that would allow you to disable the WHQL certification warnings
programmatically. If it existed, everyone would use it and it would defeat
the whole purpose. 

I have seen one driver that, in their installation instructions, directed
the user to temporarily disable the warnings manually.

Jim



-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Re: [WiX-users] Difx, Authenticode and Driver Signing

2006-07-28 Thread Chesong Lee 








 

There is no public APIs to adjust driver
signing policy from the application.

Even though there are some hacks for that,
it is a tempering for operating systems and highly discouraged.

The only right way to achieve your goal is
to get WHQL certification.

 

Authenticode signing is also applicable only
for Windows 2003 Server or later platforms.

 

Regards,

 

Chesong
 Lee

 









From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Shmarya Rubenstein
Sent: Wednesday, July 26, 2006
6:32 AM
To: wix-users@lists.sourceforge.net
Subject: [WiX-users] Difx,
Authenticode and Driver Signing



 

Hi all,

I have a driver package which I'm installing using DifX and WiX.

For various reasons (Cash, Time, Confidentiality...) I can't submit the driver
to WHQL for certification. I would, however, love to get rid of the annoying
boxes which are displayed during installation to warn [read: iritate] the user.


I read on various WDK/DDK pages that Authenticode signing the drivers should do
the trick, but it seems that this is only applicable to Windows Server 2003+,
which kinda sucks for my Win2K and XP users... BTW: I only found out that it
doesn't work for XP and 2K, after purchasing a Thawte certificate and signing
all the drivers - bleh :P. 

I know that it is possible to ignore these warnings globally by changing a
setting on the computer manually. I've also seen installations for drivers
which automatically turn driver signing warnings off for the duration of the
installation, and turn it back on when they're done. 

Does anyone know how to acheive this?

Better yet, have I made a mistake with my authenticode signing?

Thanks,

-- 
Shmarya
--- 
[EMAIL PROTECTED]
- http://shmarya.net
NUnit rocks! http://nunit.com 






-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV___
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Re: [WiX-users] Difx, Authenticode and Driver Signing

2006-07-28 Thread Shmarya Rubenstein 
It's not something your mom'd install... Unless she happens to have a seriously large sum of money and a small corporation burning a hole in her pocket ;)The product is a very specialized system which is installed only by very select customers... It is a mixed software/hardware/firmware system, with both a very large code base and a large number of custom hardware devices.
Because these devices are custom built (and their drivers too of course!), and more importantly, because their usage is so heavily restricted and some of them are even confidential, we cannot submit them to WHQL for testing...
This means that our poor users, select as they may be, end up having to click "Continue Anyway" anywhere between 20 to 50 (!) times during the installation... Needless to say, this is very frustrating...
I haven't got any problem signing my drivers, in fact, I've already purchased an authenticode signature and signed them! But there should be some way to allow such drivers to be installed without all the irritating messageboxes... This functionality seems to be available in Windows Server 2003 (and supposedly in Vista/Longhorn as well), but meanwhile, all of our users are on Win2k and XP boxes...
I know that it is possible to hack around the whole driver-signing thing, as I've seen it done before - just not in MSI...At the moment, I've more or less given up on it, and have been forced to add instructions for how to *manually* disable driver signing to my release notes...
Please, tell me there's a better solution!?!?Thanks,ShmaryaOn 7/27/06, Rob Mensching <
[EMAIL PROTECTED]> wrote:To be perfectly clear, you are trying to bypass a feature that was put in
place to protect users.  I don't work with drivers and don't really know awhole lot about them, in general, but I don't think you'll get a lot ofsupport trying to hack around the protection.  The whole thing sounds pretty
sketchy to me.What product are you shipping?  It really doesn't sound like something Iwant to install on my machine or have my Mom install.-From: 
[EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] On Behalf Of ShmaryaRubensteinSent: Thursday, July 27, 2006 1:59 AM
To: Stefan PavlikCc: wix-users@lists.sourceforge.netSubject: Re: [WiX-users] Difx, Authenticode and Driver SigningUnfortunately, WHQL signing is not an option
I know its not a good practice, but if there's any way to do it... :)-- Shmarya---
[EMAIL PROTECTED] - http://shmarya.netNUnit rocks! http://nunit.com
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV___
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Re: [WiX-users] Difx, Authenticode and Driver Signing

2006-07-28 Thread Rob Mensching 
To be perfectly clear, you are trying to bypass a feature that was put in
place to protect users.  I don't work with drivers and don't really know a
whole lot about them, in general, but I don't think you'll get a lot of
support trying to hack around the protection.  The whole thing sounds pretty
sketchy to me.

What product are you shipping?  It really doesn't sound like something I
want to install on my machine or have my Mom install.

-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Shmarya
Rubenstein
Sent: Thursday, July 27, 2006 1:59 AM
To: Stefan Pavlik
Cc: wix-users@lists.sourceforge.net
Subject: Re: [WiX-users] Difx, Authenticode and Driver Signing

Unfortunately, WHQL signing is not an option

I know its not a good practice, but if there's any way to do it... :)


-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Re: [WiX-users] Difx, Authenticode and Driver Signing

2006-07-27 Thread Shmarya Rubenstein 
Unfortunately, WHQL signing is not an optionI know its not a good practice, but if there's any way to do it... :)On 7/27/06, Stefan Pavlik <
[EMAIL PROTECTED]> wrote:Hi,...we had similar problem in our project.
I have never seen installation which turns the driver signing offand on.http://support.microsoft.com/?kbid=298503Our solution was to create appliaction ( using AutoIt -
http://www.autoitscript.com/autoit3/)to automaticaly answer theese dialogs.This solution was no so nice, but works OK (problem was to collectthe text translations used by MS to detect the correct window).
Now our driver is digitaly signed and the original problem (and notvery nice solution) is gone.regardsStefanShmarya Rubenstein wrote:> Hi all,>> I have a driver package which I'm installing using DifX and WiX.
>> For various reasons (Cash, Time, Confidentiality...) I can't submit the> driver to WHQL for certification. I would, however, love to get rid of> the annoying boxes which are displayed during installation to warn
> [read: iritate] the user.>> I read on various WDK/DDK pages that Authenticode signing the drivers> should do the trick, but it seems that this is only applicable to> Windows Server 2003+, which kinda sucks for my Win2K and XP users...
> BTW: I only found out that it doesn't work for XP and 2K, after> purchasing a Thawte certificate and signing all the drivers - bleh :P.>> I know that it is possible to ignore these warnings globally by changing
> a setting on the computer manually. I've also seen installations for> drivers which automatically turn driver signing warnings off for the> duration of the installation, and turn it back on when they're done.
>> Does anyone know how to acheive this?>> Better yet, have I made a mistake with my authenticode signing?>> Thanks,>> --> Shmarya> ---
> [EMAIL PROTECTED] [EMAIL PROTECTED]> -> 
http://shmarya.net> NUnit rocks! http://nunit.com>>> >> -
> Take Surveys. Earn Cash. Influence the Future of IT> Join SourceForge.net's Techsay panel and you'll get the chance to share your> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV>> __ NOD32 1.1679
 (20060726) Information __>> This message was checked by NOD32 antivirus system.> http://www.eset.com 
>> ___> WiX-users mailing list> WiX-users@lists.sourceforge.net> 
https://lists.sourceforge.net/lists/listinfo/wix-users>>> __ NOD32 1.1679 (20060726) Information __>> This message was checked by NOD32 antivirus system.> 
http://www.eset.com>--Stefan Pavlik | [EMAIL PROTECTED]Whitestein Technologies | www.whitestein.comPanenska 28 | SK-81103 Bratislava | Slovak Republic
Tel +421(2)5930-0735 | Fax +421(2)5443-5512-- Shmarya---
[EMAIL PROTECTED] - http://shmarya.netNUnit rocks! http://nunit.com
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV___
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Re: [WiX-users] Difx, Authenticode and Driver Signing

2006-07-27 Thread Stefan Pavlik 
Hi,...

we had similar problem in our project.
I have never seen installation which turns the driver signing off
and on.
http://support.microsoft.com/?kbid=298503

Our solution was to create appliaction ( using AutoIt -
http://www.autoitscript.com/autoit3/)
to automaticaly answer theese dialogs.
This solution was no so nice, but works OK (problem was to collect
the text translations used by MS to detect the correct window).

Now our driver is digitaly signed and the original problem (and not
very nice solution) is gone.

regards

Stefan

Shmarya Rubenstein wrote:
> Hi all,
> 
> I have a driver package which I'm installing using DifX and WiX.
> 
> For various reasons (Cash, Time, Confidentiality...) I can't submit the
> driver to WHQL for certification. I would, however, love to get rid of
> the annoying boxes which are displayed during installation to warn
> [read: iritate] the user.
> 
> I read on various WDK/DDK pages that Authenticode signing the drivers
> should do the trick, but it seems that this is only applicable to
> Windows Server 2003+, which kinda sucks for my Win2K and XP users...
> BTW: I only found out that it doesn't work for XP and 2K, after
> purchasing a Thawte certificate and signing all the drivers - bleh :P.
> 
> I know that it is possible to ignore these warnings globally by changing
> a setting on the computer manually. I've also seen installations for
> drivers which automatically turn driver signing warnings off for the
> duration of the installation, and turn it back on when they're done.
> 
> Does anyone know how to acheive this?
> 
> Better yet, have I made a mistake with my authenticode signing?
> 
> Thanks,
> 
> -- 
> Shmarya
> ---
> [EMAIL PROTECTED]  -
> http://shmarya.net
> NUnit rocks! http://nunit.com
> 
> 
> 
> 
> -
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> 
> __ NOD32 1.1679 (20060726) Information __
> 
> This message was checked by NOD32 antivirus system.
> http://www.eset.com
> 
> 
> 
> 
> 
> ___
> WiX-users mailing list
> WiX-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/wix-users
> 
> 
> __ NOD32 1.1679 (20060726) Information __
> 
> This message was checked by NOD32 antivirus system.
> http://www.eset.com
> 

-- 
Stefan Pavlik | [EMAIL PROTECTED]
Whitestein Technologies | www.whitestein.com
Panenska 28 | SK-81103 Bratislava | Slovak Republic
Tel +421(2)5930-0735 | Fax +421(2)5443-5512

-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

[WiX-users] Difx, Authenticode and Driver Signing

2006-07-26 Thread Shmarya Rubenstein 
Hi all,I have a driver package which I'm installing using DifX and WiX.For various reasons (Cash, Time, Confidentiality...) I can't submit the driver to WHQL for certification. I would, however, love to get rid of the annoying boxes which are displayed during installation to warn [read: iritate] the user.
I read on various WDK/DDK pages that Authenticode signing the drivers should do the trick, but it seems that this is only applicable to Windows Server 2003+, which kinda sucks for my Win2K and XP users... BTW: I only found out that it doesn't work for XP and 2K, after purchasing a Thawte certificate and signing all the drivers - bleh :P.
I know that it is possible to ignore these warnings globally by changing a setting on the computer manually. I've also seen installations for drivers which automatically turn driver signing warnings off for the duration of the installation, and turn it back on when they're done.
Does anyone know how to acheive this?Better yet, have I made a mistake with my authenticode signing?Thanks,-- Shmarya---
[EMAIL PROTECTED] - http://shmarya.netNUnit rocks! http://nunit.com
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV___
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users