{"id":272,"date":"2016-01-19T14:10:39","date_gmt":"2016-01-19T14:10:39","guid":{"rendered":"http:\/\/www.pkipartner.support\/?page_id=272"},"modified":"2016-01-28T12:38:09","modified_gmt":"2016-01-28T12:38:09","slug":"codesign-windows-kernel-mode-code-signing-wcomodo-certificates","status":"publish","type":"page","link":"https:\/\/pkipartner.com\/support\/codesign-windows-kernel-mode-code-signing-wcomodo-certificates\/","title":{"rendered":"Codesign – Windows Kernel-Mode Code Signing w\/Comodo certificates"},"content":{"rendered":"

Windows Kernel-Mode Code Signing w\/Comodo certificates<\/h1>\n

As of late August 2013, all valid (not expired, not revoked) Comodo Code Signing Certificates can be used for Kernel-Mode Code Signing!!! (For Windows Vista and greater)<\/p>\n

    \n
  1. Download the Comodo cross-signed CA that matches your Code Signing certificate’s Root CA.<\/li>\n
  2. Open an elevated Windows command prompt (cmd) and run signtool.exe<\/strong>:\n

    signtool.exe sign \/v \/ac “CROSS_SIGNED_COMODO_CA_HERE”<\/strong> \/f YOUR_PFX_HERE<\/strong> \/tr http:\/\/timestamp.comodoca.com\/rfc3161<\/a> “FULL_PATH_TO_FILE_TO_SIGN”<\/strong><\/p>\n

    Example:<\/strong> signtool.exe \/v \/ac “AddTrustExternalCARoot_kmod.crt” \/f my.pfx \/tr http:\/\/timestamp.comodoca.com\/rfc3161<\/a> “C:\\myfile.dll”<\/strong><\/li>\n<\/ol>\n

     <\/p>\n

    Note:<\/strong> For most customers CROSS_SIGNED_COMODO_CA_HERE<\/strong> will be:<\/p>\n

    [KMCS] AddTrust External CA Root<\/a>
    \nOR<\/strong>
    \n    [KMCS] UTN-USERFirst-Object<\/a>.<\/p>\n

    For more general information and instruction about kernel mode signing certificates, see Microsoft’s Kernel-Mode Code Signing Walkthrough<\/a>. (MSDN.microsoft.com)<\/p>\n","protected":false},"excerpt":{"rendered":"

    Windows Kernel-Mode Code Signing w\/Comodo certificates As of late August 2013, all valid (not expired, not revoked) Comodo Code Signing Certificates can be used for Kernel-Mode Code Signing!!! (For Windows Vista and greater) Download the Comodo cross-signed CA that matches your Code Signing certificate’s Root CA. Open an elevated Windows\u2026<\/p>\n

    Continue reading<\/span><\/i><\/a> <\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/272"}],"collection":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/comments?post=272"}],"version-history":[{"count":2,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/272\/revisions"}],"predecessor-version":[{"id":624,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/272\/revisions\/624"}],"wp:attachment":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/media?parent=272"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}