We have a file system minifilter driver which monitors I/O activity. This driver has two slightly different versions. Main version monitors all file systems activities. Second one ignores read events. Rest all is same between them. They even use the same altitude as well. Intention for second one was to avoid monitoring spurious read requests occurring in some customer environments.
We provide both drivers as part of installer. Second one has slightly different name than main version. If any customer wants to use second version, they rename it the to main version and install it.
Now we would like to get certified for Secure Boot. Our HLK tests are passing without any issue. But I am not aware of how to create HLK package for second version. Can any body provide me some idea about how to proceed?
The issue with this approach is that any changes to the package will
invalidate the signing on the binary and cat files. So you could submit both
drivers for HLK certification but then you would not be able to have the
customer change the name of the binary and install it. That said, why not
make this some sort of configuration option? Maybe a mode setting that can
read from the registry? Then you don’t have 2 separate binaries to deal
with, just a single binary, one HLK submission, etc.
Pete
Kernel Drivers
Windows File System and Device Driver Consulting
www.KernelDrivers.com
866.263.9295
-----Original Message-----
From: xxxxx@lists.osr.com
On Behalf Of xxxxx@live.com
Sent: Saturday, May 19, 2018 9:48 AM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] Query regarding driver submission to WHQL
We have a file system minifilter driver which monitors I/O activity. This
driver has two slightly different versions. Main version monitors all file
systems activities. Second one ignores read events. Rest all is same between
them. They even use the same altitude as well. Intention for second one was
to avoid monitoring spurious read requests occurring in some customer
environments.
We provide both drivers as part of installer. Second one has slightly
different name than main version. If any customer wants to use second
version, they rename it the to main version and install it.
Now we would like to get certified for Secure Boot. Our HLK tests are
passing without any issue. But I am not aware of how to create HLK package
for second version. Can any body provide me some idea about how to proceed?
—
NTFSD is sponsored by OSR
MONTHLY seminars on crash dump analysis, WDF, Windows internals and software
drivers!
Details at http:
To unsubscribe, visit the List Server section of OSR Online at
http:</http:></http:>
If you submit both you could also just change the ImagePath value in the
registry to switch between the two.
However, I agree that a better option would be to put this into a single
binary and make a configuration option in the registry. Then you only have
one binary to run through the HLKs (which is time consuming enough).
-scott
OSR
@OSRDrivers
Peter, Scott, thanks for your suggestions.
I agree that using registry to set the mode will be a better approach. I will implement it and reduce the complexity.