c++ - StartService FAILED 577自签名内核驱动程序，如何解决？

Question

我正在尝试在Windows 10(10.0.18362)上安装自签名内核驱动程序，这里是我遵循的步骤以及出现的错误。如何解决这个问题？谢谢

c:\>makecert -r -pe -ss PrivateCertStore -n CN=Contoso.com(Test) -eku 1.3.6.1.5.5.7.3.3 ContosoTest.cer

c:\>certmgr /add ContosoTest.cer /s /r localMachine root
// now manually verified Cert Store, yes the Contoso test cert is there

c:\>Signtool sign /v /fd sha256 /s PrivateCertStore /n Contoso.com(Test) /t http://timestamp.digicert.com "C:\VC\TPriority\x64\TPriorityDriver.sys"

c:\>sc create "TPriority" binPath="c:/windows/system32/drivers/TPriorityDriver.sys" type=kernel

// now copied file TPriorityDriver.sys to "C\Windows\System32\drivers" path

c:\>sc start "TPriority"
[SC] StartService FAILED 577:

Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Answer 1

阅读Driver Signing使我相信，无论根存储中安装了哪种证书，自签名证书都不适用于驱动程序。您也许可以完全禁用证书检查以进行测试(我知道以前可能这样做，不确定是否仍然可以这样做)，但我不建议在抛弃式VM或完全空白的硬件上使用它。