如何在 Windows 10 上安装签名驱动程序而不收到 "Program Compatibility Assistant" 消息

Question

当我尝试安装我的设备驱动程序时，我得到

"Program Compatibility Dialog" 需要数字签名的驱动程序：进程检测驱动程序 Cetrus。 Windows 阻止安装未数字签名的驱动程序。卸载使用驱动程序的程序或设备，并在发布者的网站上查看驱动程序的数字签名版本。

我的驱动程序已签名：

        Verifying: PDetect64.sys
        Signature Index: 0 (Primary Signature)
        Hash of file (sha1): 039DFBD6C922B86BC9D8E2ABF9AADAB800ABE21E

        Signing Certificate Chain:
            Issued to: AddTrust External CA Root
            Issued by: AddTrust External CA Root
            Expires:   Sat May 30 03:48:38 2020
            SHA1 hash: 02FAF3E291435468607857694DF5E45B68851868

                Issued to: COMODO RSA Certification Authority
                Issued by: AddTrust External CA Root
                Expires:   Sat May 30 03:48:38 2020
                SHA1 hash: F5AD0BCC1AD56CD150725B1C866C30AD92EF21B0

                    Issued to: COMODO RSA Code Signing CA
                    Issued by: COMODO RSA Certification Authority
                    Expires:   Mon May 08 16:59:59 2028
                    SHA1 hash: B69E752BBE88B4458200A7C0F4F5B3CCE6F35B47

                        Issued to: Cetrus LLC
                        Issued by: COMODO RSA Code Signing CA
                        Expires:   Sun May 26 16:59:59 2019
                        SHA1 hash: 647ACC3A5A36302E3A096F05595FD94EF8ED530D

        The signature is timestamped: Fri May 26 10:58:35 2017
        Timestamp Verified by:
            Issued to: UTN-USERFirst-Object
            Issued by: UTN-USERFirst-Object
            Expires:   Tue Jul 09 11:40:36 2019
            SHA1 hash: E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46

                Issued to: COMODO SHA-1 Time Stamping Signer
                Issued by: UTN-USERFirst-Object
                Expires:   Tue Jul 09 11:40:36 2019
                SHA1 hash: 03A5B14663EB12023091B84A6D6A68BC871DE66B

        Cross Certificate Chain:
            Issued to: Microsoft Code Verification Root
            Issued by: Microsoft Code Verification Root
            Expires:   Sat Nov 01 06:54:03 2025
            SHA1 hash: 8FBE4D070EF8AB1BCCAF2A9D5CCAE7282A2C66B3

                Issued to: AddTrust External CA Root
                Issued by: Microsoft Code Verification Root
                Expires:   Tue Aug 15 13:36:30 2023
                SHA1 hash: A75AC657AA7A4CDFE5F9DE393E69EFCAB659D250

                    Issued to: COMODO RSA Certification Authority
                    Issued by: AddTrust External CA Root
                    Expires:   Sat May 30 03:48:38 2020
                    SHA1 hash: F5AD0BCC1AD56CD150725B1C866C30AD92EF21B0

                        Issued to: COMODO RSA Code Signing CA
                        Issued by: COMODO RSA Certification Authority
                        Expires:   Mon May 08 16:59:59 2028
                        SHA1 hash: B69E752BBE88B4458200A7C0F4F5B3CCE6F35B47

                            Issued to: Cetrus LLC
                            Issued by: COMODO RSA Code Signing CA
                            Expires:   Sun May 26 16:59:59 2019
                            SHA1 hash: 647ACC3A5A36302E3A096F05595FD94EF8ED530D


        Successfully verified: PDetect64.sys

        Number of files successfully Verified: 1
        Number of warnings: 0
        Number of errors: 0

有人可以帮忙弄清楚为什么 Windows 10 认为这是一个未签名的驱动程序吗？

Answer 1

你的Windows10具体是什么版本运行？从新安装 Windows 10 的版本 1607 开始，Windows 不加载任何未经 Dev Portal 签名的新内核模式驱动程序。有关详细信息，请参阅 https://docs.microsoft.com/en-us/windows-hardware/drivers/install/kernel-mode-code-signing-policy--windows-vista-and-later-

Answer 2

ONLY方法是使用EV代码签名证书对驱动程序进行签名。

如何在 Windows 10 上安装签名驱动程序而不收到 "Program Compatibility Assistant" 消息

How do I install a signed driver on Windows 10 without getting "Program Compatibility Assistant" message

code-signing

device-driver

windows-10-desktop