Driver signing cheat-sheet


inf2cat (x86 + x64, Windows 7 to 10 + Server OS)

The following example creates a catalog file for a driver compatible with both x86 and x64 architectures and suited for Windows 7 up to 10 and Windows Server versions. It's assumed that the .INF file resides in the current directory.

Inf2Cat.exe /driver:"." /uselocaltime /os:7_X64,Server2008R2_X64,8_X64,Server8_X64,6_3_X64,Server6_3_X64,10_X64,Server10_X64,10_AU_X64,Server2016_X64,10_RS2_X64,ServerRS2_X64,7_X86,8_X86,6_3_X86,10_X86,10_AU_X86,10_RS2_X86

Cross-sign catalog and binaries in one go

Cross-sign and timestamp catalog file and all compatible files in x86 and x64 sub-directories within the same path. Adjust path to cross-signing-certificate and EV certificate friendly name accordingly. Cross-Certificates for Kernel Mode Code Signing.

signtool sign /v /ac "C:\Program Files (x86)\Windows Kits\10\CrossCertificates\DigiCert_High_Assurance_EV_Root_CA.crt" /n "Nefarius Software Solutions e.U." /tr /fd sha256 /td sha256 *.cat .\x64\*.* .\x86\*.*