Welcome to MSFN

Register now to gain access to all of our features. Once registered and logged in, you will be able to contribute to this site by submitting your own content or replying to existing content. You'll be able to customize your profile, receive reputation points as a reward for submitting content, while also communicating with other members via your own private inbox, plus much more! This message will be removed once you have signed in.


Sign in to follow this  
Followers 0
BoardBabe

Driver Signing policy

7 posts in this topic

My winnt.sif contains DriverSigningPolicy=Ignore, but when installation is complete the Windows Driver Signing is set to ask what to do in case of a non signed driver.

I found this can be "fixed" with the following reg key.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Driver Signing]
"Policy"=hex:00

Will it work applying this from cmdlines.txt, at that early stage? And does DriverSigningPolicy=Ignore in winnt.sif not work, or is this only for OemPnPDriversPath?

Im also installing some drivers from WPI, so Driver Signing should be off at least at WPI stage, and maybe turned back on at cleanup after WPI?

0

Share this post


Link to post
Share on other sites
Will it work applying this from cmdlines.txt, at that early stage?
I apply the tweak at that point and it works great for me.
And does DriverSigningPolicy=Ignore in winnt.sif not work, or is this only for OemPnPDriversPath?
THE GUIDE notes that the winnt.sif entry "DriverSigningPolicy=Ignore" is likely buggy, and that is my experience as well. I rely on neither, trying instead to use WHQL certified drivers wherever possible.
0

Share this post


Link to post
Share on other sites
WHQL certified drivers wherever possible.
sometimes just not possible.

I modify the I386\HIVESFT.inf, search for

SOFTWARE\Microsoft\Driver Signing

replace with

HKLM,"SOFTWARE\Microsoft\Driver Signing","Policy",0x00000001,00

I also add the reg entry here that run's with cmdlines in the GuiUnattended as DrvSign.cmd

I don't know how this will affect the WPI, this will be applied to all. You could import that reg thing in cleanup.cmd or perhap's add a REG ADD that applies at next boot, I do that with bthe Fonts to open font folder to register fonts on reboot..

Edited by maxXPsoft
0

Share this post


Link to post
Share on other sites

Interesting.

Do you really need to apply a .reg file if you modify HIVESFT.inf?

0

Share this post


Link to post
Share on other sites

I do both BoardBabe, work's for me with my UnattendXP app

I found applying both makes it stick, sorta like the Quick Launch things I have and want

Whatever make's it work...

Edited by maxXPsoft
0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0

  • Recently Browsing   0 members

    No registered users viewing this page.