You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+41-11Lines changed: 41 additions & 11 deletions
Original file line number
Diff line number
Diff line change
@@ -146,47 +146,77 @@ generate your Makefile.
146
146
147
147
Signing
148
148
-----------
149
-
150
149
To install a built-from-source or a nightly (from github actions) driver, you need to sign it
151
-
In this section, I will show how to compile the driver using test-signing.
152
-
Example commands are given for each steps but it is recommand to check the microsoft documentation link about test-signing, so you know what you are doing
150
+
In this section, I will show how to disable driver signature enforcement, or how to sign the driver using test-signing
151
+
Warning : both of these solutions aren't perfect, if you are looking for a everyday-use it is recommanded to use the release builds, which are signed with a Microsoft-trusted key.
152
+
153
+
154
+
## Disabling signature enforcement
155
+
Note : this isn't persistent accross reboots
156
+
157
+
Relevant link : https://docs.microsoft.com/en-us/windows-hardware/drivers/install/installing-an-unsigned-driver-during-development-and-test
158
+
159
+
### 1 - Reboot your computer without driver signature enforcement
160
+
161
+
(This can be done by pressing the 'Shift' key while rebooting the computer, this will take you to a special screen from which you can select "Troubleshoot" -> "Startup settings" -> "Disable driver signature enforcement")
162
+
163
+
### 2 - Install the driver
164
+
165
+
Open the previously downloaded artifact from Github Actions (or mimic the directory structure and fill it with the binaries you just compiled), right-click the btrfs.inf file -> install
153
166
154
-
More information can be found at https://docs.microsoft.com/en-us/windows-hardware/drivers/install/test-signing
167
+
A window saying "Microsoft can't verify the publisher of this driver" should pop-up. Click "Install anyway"
168
+
169
+
If the window didn't show up, the driver probably wasn't installed, make sure you booted your computer with driver signature enforcement disabled.
170
+
171
+
The computer should next tell you to reboot your computer
172
+
173
+
### 3 - Reboot the computer again without driver signature enforcement
174
+
Follow the same instructions as step 1
175
+
176
+
### 4 - Done !
177
+
The driver should now be installed ! Note it will only load when the computer is started without driver signature enforcement
178
+
179
+
180
+
181
+
## Test-signing the driver
182
+
Note : This method is harder to put in place, and has the only benefit of persisting after reboots.
183
+
184
+
Example commands are given for each steps but it is recommand to check the microsoft documentation link about test-signing, so you know what you are doing
155
185
156
-
Note : this is not practical for a everyday use
186
+
Relevant link : https://docs.microsoft.com/en-us/windows-hardware/drivers/install/test-signing
157
187
158
-
**1 - Put your computer in test mode**
188
+
### 1 - Put your computer in test mode
159
189
160
190
test-signing doesn't seem to work with Windows by default. You will need to put your computer in a special mode to allow test-signing.
161
191
162
192
`bcdedit /set testsigning on`
163
193
164
194
Note : you might need to disable Secure Boot for this to work
165
195
166
-
**2 - Generate a MakeCert certificate**
196
+
### 2 - Generate a MakeCert certificate
167
197
168
198
This certificate will be used to sign the catalog file of the driver
For your certificate to be effective, it needs to be installed in the "Trusted Root Certification Authorities" certificate store of the computer you want to install the driver on.
175
205
You can add it by launching "CertMgr" **as administrator**, selecting the "Trusted Root Certification Authorities" certificate store, and importing the .cer file generated earlier
176
206
(The command given on the documentation doesn't seem to work and just launches the CertMgr GUI)
177
207
178
-
**4 - Generate a catalog file for your driver**
208
+
### 4 - Generate a catalog file for your driver
179
209
180
210
You will need the "Inf2Cat" tool, installed as part of the WDK.
181
-
Run the command in the same directory as your .inf file (or modify the /driver flag)
211
+
Run the command in the same directory as your btrfs.inf file (or modify the /driver flag)
182
212
183
213
The command will differ in your case (because of the path) but here is the one I used :
0 commit comments