title: workaround to skip driver signing in 64bit windows
body: <p>I am an individual, not a company and i am working on a virtual kernel mode device driver. I am aware that I can test sign a driver and run in test mode. However I want to distribute my driver free of cost , but i don't have the resources to buy signature through verisign or globalsign as it is very costly and i am not earning anything through this driver . </p>
  
  <p>Also test signing a driver will be a daunting task for some of the user . So i want to know is there any workaround to use the driver without signature in 64bit ?. Like run it in compatibility for 32bit , or a script that can self sign the driver on behalf of the user.  </p>
  
  <hr>
  
  <blockquote>
    <p><strong>So now the question essentially is , if i distribute all the exes mentioned in this procedure and make a script to run all these
    commands . Then can the driver be signed by the user using the
    script?</strong> </p>
    
    <p>PROCEDURE :</p>
    
    <p>1.execute Inf2Cat.exe /driver:"U:\MyDriver" /os:7_X64</p>
    
    <p>2.Find makecert.exe in WDK Makecert -r -pe -ss PrivateCertStore -n "CN=TestCertforWDK" TestCert.cer</p>
    
    <p>3.Use Signtool.exe in WDK to sign the cat file Signtool sign /v /s PrivateCertStore /n TestCertForWDK /t
    <a href="http://timestamp.verisign.com/scripts/timestamp.dll" rel="nofollow">http://timestamp.verisign.com/scripts/timestamp.dll</a>
    "U:\MyDriver\MyDriver.cat"</p>
    
    <p>4.Use Signtool.exe in WDK to sign the driver Signtool sign /v /s PrivateCertStore /n TestCertForWDK /t
    <a href="http://timestamp.verisign.com/scripts/timestamp.dll" rel="nofollow">http://timestamp.verisign.com/scripts/timestamp.dll</a>
    "U:\MyDriver\MyDriver.sys"</p>
    
    <p>5.On test computer, import the certificate: certmgr.exe /add TestCert.cer /s /r localMachine root</p>
    
    <p>6.Add it to trusted publisher list certmgr.exe /add TestCert.cer /s /r localMachine trustedpublisher</p>
    
    <p>7.Verify the sign for driver Signtool verify /pa /v MyDriver.sys</p>
    
    <p>8.Verify the sign for cat file Signtool verify /pa /v /c MyDriver.cat MyDriver.inf</p>
  </blockquote>