<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
	<title type="html"><![CDATA[DriverPacks.net Forum - Disable driver signing]]></title>
	<link rel="self" href="http://forum.driverpacks.net/extern.php?action=feed&amp;tid=3582&amp;type=atom"/>
	<updated>2012-11-06T04:44:50Z</updated>
	<generator>PunBB</generator>
	<id>http://forum.driverpacks.net/viewtopic.php?id=3582</id>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=49707#p49707"/>
			<content type="html"><![CDATA[<p>you guys are giving a rebuttal to a spambot <img src="http://forum.driverpacks.net/img/smilies/tongue.png" width="15" height="15" alt="tongue" /></p><p>that is why it looks cut and pasted and why the links are dead. Also why Mr_S removed his signature...</p>]]></content>
			<author>
				<name><![CDATA[OverFlow]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=1097</uri>
			</author>
			<updated>2012-11-06T04:44:50Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=49707#p49707</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=49705#p49705"/>
			<content type="html"><![CDATA[<p>one important tidbit concerning Driver Signing.&nbsp; If it&#039;s just a modded .Inf that is at issue:<br /></p><div class="quotebox"><cite>Laslow wrote:</cite><blockquote><p>&quot;Once the driver is installed you don’t need to leave enforcement disabled.&quot;</p></blockquote></div><p>I realized over half-way through responding to that post that i was merely responding to a bot.<br />Then i remembered that some readers here are on the opposite half of the computer-savvy bell-curve.<br />I responded for them.</p><p>PS:&nbsp; I thought it was &lt;ctrl&gt;F8.</p>]]></content>
			<author>
				<name><![CDATA[TechDud]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=14671</uri>
			</author>
			<updated>2012-11-06T00:44:28Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=49705#p49705</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=49700#p49700"/>
			<content type="html"><![CDATA[<div class="quotebox"><cite>kanmani shanmugam wrote:</cite><blockquote><p> ...<br />At present, during booting up, I need to go thorugh the loop F8 to manually disable &quot;digital driver enforcement&quot;, but this is good for the current session only.</p><p>Is there a clever way to permanently disable digital driver enforcement, so that I do not have to use the F8 option manually every time?</p><p>Thanks.</p></blockquote></div><p>Wow most of that post was copy and paste... A little google searching would yield the below</p><p>Errr...http://www.google.com/#hl=en&amp;tbo=d&amp;output=search&amp;sclient=psy-ab&amp;q=disable+unsigned+driver+windows+8&amp;oq=disable+unsigned+driver+windows+8</p><p><a href="http://laslow.net/2012/03/14/disable-driver-signature-enforcement-in-windows-8/">http://laslow.net/2012/03/14/disable-dr … windows-8/</a><br /><a href="http://social.technet.microsoft.com/Forums/en/W8ITProPreRel/thread/ed9425fe-15d9-43bc-bbd4-62a60cd6c109">http://social.technet.microsoft.com/For … a60cd6c109</a></p>]]></content>
			<author>
				<name><![CDATA[stamandster]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=2760</uri>
			</author>
			<updated>2012-11-05T02:18:53Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=49700#p49700</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=49671#p49671"/>
			<content type="html"><![CDATA[<p>Respectfully, <span style="color: royalblue">kanmani shanmugam</span>, can you offer evidence of this, as the following quote from you seems at first blush to be patently false.<br /></p><div class="quotebox"><cite>kanmani shanmugam wrote:</cite><blockquote><p>&quot;Unfortunately, you’ll find more unsigned than signed drivers on the market right now.&quot;</p></blockquote></div><p>At least offer up three examples of hardware that cannot work without disabling Driver Signing, and the version of Windows used.&nbsp; Perhaps this would be of assistance to find properly signed drivers from official channels.&nbsp; <img src="http://forum.driverpacks.net/img/smilies/hmm.png" width="15" height="15" alt="hmm" /></p><p><span style="color: crimson"><span class="bbu">You may be correct, yet you should offer some proof, not just blanket statements which could mislead people.</span></span><br /></p><div class="quotebox"><cite>Sûnnet Beskerming wrote:</cite><blockquote><p>&quot;As with any other system modification and administration tool, system instability, failure or unresponsiveness may be encountered when using Atsiv - so use is at the user&#039;s own risk.&quot;<br /><a href="http://www.theregister.co.uk/2007/07/30/vista_driver_tool/">http://www.theregister.co.uk/2007/07/30 … iver_tool/</a></p></blockquote></div><p>It is good that you do acknowledge this.<br /></p><div class="quotebox"><cite>kanmani shanmugam wrote:</cite><blockquote><p>&quot;Of course, you’re giving up a little extra reliability and security to use this feature — at least in theory.&quot;</p></blockquote></div><p>Another note; your link to Atsiv comes up &quot;404 Not Found&quot; on my system AND the link to article you mentioned on &quot;avantgo.computerworld.com.au&quot; reveals an all-but blank page!</p><p><strong><span class="bbu">Edit:</span></strong>&nbsp; I finally got through to Linchpinlabs site you linked to above.&nbsp; It says that Atsiv was declared to be malware by MS &amp; it&#039;s digital signature was revoked on August 3, 2007.</p><p>Here is some more food for thought concerning drivers, driver signing, &amp; malware:<br /></p><div class="quotebox"><blockquote><p><strong>Quote from Cisco&#039;s Cyber Risk Report, July 19–25, 2010</strong></p><p>&quot;Microsoft recently collaborated with Verisign to revoke certificates issued to Realtek and JMicron, two hardware companies whose private keys for their driver-signing signatures were apparently compromised. These companies&#039; signatures were used to sign malicious drivers distributed as part of the Stuxnet malware that has recently targeted SCADA systems via USB drives. Realtek and JMicron were issued new certificates to sign future drivers.&quot;<br />...<br />&quot;IntelliShield Analysis: Some reports, which appear to originate with Sophos&#039; Mike Wood, indicate that signed drivers whose certificates have been revoked will continue to function if they were signed prior to the revocation date. Only drivers signed with a revoked certificate after the revocation date will not load. If this is true, then this action by Microsoft and Verisign will apparently only prevent the malware distributors from further signing additional malware with Realtek and JMicron&#039;s compromised private keys. If Wood and others are not correct, then organizations using Realtek and JMicron hardware with signed drivers may soon notice that their hardware is not functioning as expected. &quot;<br /><a href="http://www.cisco.com/web/about/security/intelligence/CRR_Jul19-25.html#4">http://www.cisco.com/web/about/security … -25.html#4</a></p></blockquote></div><p>Additional info here --&gt; <a href="http://www.securelist.com/en/blog/2236/Stuxnet_signed_certificates_frequently_asked_questions">http://www.securelist.com/en/blog/2236/ … _questions</a><br />&nbsp; &nbsp;&amp; here, all from July, 2010 --&gt; <a href="http://blogs.cisco.com/security/stuxnet_exploiting_trust_relationships_and_expected_behavior/">http://blogs.cisco.com/security/stuxnet … _behavior/</a></p>]]></content>
			<author>
				<name><![CDATA[TechDud]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=14671</uri>
			</author>
			<updated>2012-11-02T02:20:28Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=49671#p49671</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=49669#p49669"/>
			<content type="html"><![CDATA[<p>Disable driver signing :</p><p>Microsoft has introduced a new kernel security component for the 64-bit editions of Vista. Windows mandatory kernel mode and driver signing implies that all modules or drivers designed to run at kernel level have to feature digital signatures, to attest the software is provided by a legitimate publisher. Still, not all drivers are signed and there are many legitimate reasons for disabling driver signing in Vista.</p><p>Many of the virus, adware, security, and crash problems with Windows occu when someone installs a driver of dubious origin. The driver supposedly provides some special feature for Windows but in reality makes Windows unstable and can open doors for people of ill intent who want your system for themselves. Of course, Microsoft’s solution is to lock down Windows so that you can use only signed drivers. A signed driver is one in which the driver creator uses a special digital signature to “sign” the driver software. You can examine this signature (as can Windows) to ensure that the driver is legitimate.</p><p>Windows 2008 doesn’t load a driver that the vendor hasn’t signed. Unfortunately, you’ll find more unsigned than signed drivers on the market right now. Vendors haven’t signed their drivers, for the most part, because the process is incredibly expensive and difficult. Many vendors see the new Windows 2008 feature as Microsoft’s method of forcing them to spend money on something that they dispute as having value. Theoretically, someone can forge a signature, which means that the signing process isn’t foolproof and may not actually make Windows more secure or reliable. Of course, the market will eventually decide whether Microsoft or the vendors are correct, but for now you have to worry about having signed drivers to use with Windows.</p><p>Sometimes, not having a signed driver can cause your system to boot incorrectly or not at all. The Disable Driver Signature Enforcement option lets you override Microsoft’s decision to use only signed drivers. When you choose this option, Windows boots as it normally does. The only difference is that it doesn’t check the drivers it loads for a signature. You may even notice that Windows starts faster. Of course, you’re giving up a little extra reliability and security to use this feature — at least in theory.</p><p>You can’t permanently disable the use of signed drivers in the 64-bit version of Windows Server 2008 — at least, not using any Microsoft-recognized technique. It’s possible to disable the use of signed drivers in the 32-bit version by making a change in the global policy (more on this technique later in the section). A company named Linchpin Labs has a product called Atsiv (<a href="http://www.linchpinlabs.com/resources/atsiv/usage-design.htm">http://www.linchpinlabs.com/resources/a … design.htm</a>), which lets you overcome this problem, even on 64-bit systems. Microsoft is fighting a very nasty war to prevent people from using the product. (They recently asked VeriSign to revoke the company’s digital certificate and had the product declared malware; read more about this issue at <a href="http://avantgo.computerworld.com.au/avantgo_story.php?id=69104626.)">http://avantgo.computerworld.com.au/ava … 69104626.)</a> doesn’t check the drivers it loads for a signature. You may even notice that Windows starts faster. Of course, you’re giving up a little extra reliability and security to use this feature — at least in theory.</p><p>I have several devise drivers that are not digitally signed but otherwise work happily under windows server 2008.</p><p>At present, during booting up, I need to go thorugh the loop F8 to manually disable &quot;digital driver enforcement&quot;, but this is good for the current session only.</p><p>Is there a clever way to permanently disable digital driver enforcement, so that I do not have to use the F8 option manually every time?</p><p>Thanks.</p>]]></content>
			<author>
				<name><![CDATA[kanmani shanmugam]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=39709</uri>
			</author>
			<updated>2012-11-01T09:09:40Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=49669#p49669</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=36880#p36880"/>
			<content type="html"><![CDATA[<p>that is because the drivers can not be properly installed with nLite...</p><p>you must use DriverPacks BASE to install the drivers... and if you select text mode then you wont need f6...</p><p>Please follow the DriverPacks BASE tutorial in my signature.... <br />ALSO please note that IT SPECIFICALY SAYS not to install the DriverPacks with nLite in the tut...</p>]]></content>
			<author>
				<name><![CDATA[OverFlow]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=1097</uri>
			</author>
			<updated>2010-02-23T15:54:34Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=36880#p36880</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=36875#p36875"/>
			<content type="html"><![CDATA[<p>Looks like I am going to have to redo my install disk too!!<br />I used nlite and driver packs to incorporate my drivers and I get the beep warning about unsigned drivers but it just keeps loading. <br />I do have one question though. I need to integrate the sata drivers for XP. Do I need to use the separate driver or can I use the driver packs? In the past if I did not include the sata drivers though F6, the install would fail by not being able to access the sata drive. <br />Thanks</p>]]></content>
			<author>
				<name><![CDATA[ExTruckie]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=8996</uri>
			</author>
			<updated>2010-02-23T01:17:06Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=36875#p36875</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=30363#p30363"/>
			<content type="html"><![CDATA[<p>That is because you are using KTD. KTD uses MakePNF which is supposed to cache the INFs to speed finding drivers but instead it creates duplicate unsigned INTs that are referred to their originals... although PNFs are a MS convention PNFs don&#039;t work and is further aggravated by XP SP3<br />Don&#039;t use KTD it never worked well and never used the finisher (which is key to installing MANY drivers) <br />that is why we wrote SAD...</p>]]></content>
			<author>
				<name><![CDATA[OverFlow]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=1097</uri>
			</author>
			<updated>2009-03-27T23:49:17Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=30363#p30363</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=30354#p30354"/>
			<content type="html"><![CDATA[<p>I&#039;m suddenly having the same issue with the latest DriverPacks BASE after a year of building using NLite and DriverPacks the same way with no problems.&nbsp; Thanks for the tip on iertutil.dll, I&#039;ll have to look at my integration order and see if that&#039;s my problem too.</p><p>In my case it&#039;s extra annoying right now since driver signature checking stays broken after the install, so EVERY driver you install (even ones from Microsoft) report themselves as unsigned.</p>]]></content>
			<author>
				<name><![CDATA[WolverineFan]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=3727</uri>
			</author>
			<updated>2009-03-27T17:51:59Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=30354#p30354</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=29707#p29707"/>
			<content type="html"><![CDATA[<p>LOL - Twice as much beer for Wim! </p><p>Lord knows college students never have enough money!</p><p>PS You&#039;ll need to figure your conversion based on Euro as Wim is from Belgium <img src="http://forum.driverpacks.net/img/smilies/wink.png" width="15" height="15" alt="wink" /></p>]]></content>
			<author>
				<name><![CDATA[OverFlow]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=1097</uri>
			</author>
			<updated>2009-03-02T04:18:09Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=29707#p29707</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=29700#p29700"/>
			<content type="html"><![CDATA[<p>When the economy settles down and the Â£ is double the $ I will donate, that way my donation will be worth double.</p>]]></content>
			<author>
				<name><![CDATA[David McMahon]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=6037</uri>
			</author>
			<updated>2009-03-02T01:39:42Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=29700#p29700</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=29692#p29692"/>
			<content type="html"><![CDATA[<p>we get a million downloads a week - he is not the only one recommending us <img src="http://forum.driverpacks.net/img/smilies/wink.png" width="15" height="15" alt="wink" /></p><p>Thanks for the positive feedback!&nbsp; &nbsp;It&#039;s still a joy to hear that we have helped!</p><p>Welcome and Have a great day.</p>]]></content>
			<author>
				<name><![CDATA[OverFlow]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=1097</uri>
			</author>
			<updated>2009-03-01T19:14:15Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=29692#p29692</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=29686#p29686"/>
			<content type="html"><![CDATA[<p>p.s none other than Scott Mueller recommended Driver packs so you must be doing something right!!</p>]]></content>
			<author>
				<name><![CDATA[David McMahon]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=6037</uri>
			</author>
			<updated>2009-03-01T16:23:03Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=29686#p29686</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=29685#p29685"/>
			<content type="html"><![CDATA[<p>Fixed the iertutil.dll problem (I just changed the order in which nlite slips the updates.</p><p>It is the Driverpack finisher which &quot;clicks&quot; on the prompts automatically so it works (and is brilliant btw) will post those files when I next see the PC (as it works it&#039;s okay!</p>]]></content>
			<author>
				<name><![CDATA[David McMahon]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=6037</uri>
			</author>
			<updated>2009-03-01T16:21:42Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=29685#p29685</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Disable driver signing]]></title>
			<link rel="alternate" href="http://forum.driverpacks.net/viewtopic.php?pid=29668#p29668"/>
			<content type="html"><![CDATA[<p>Can you read <a href="http://forum.driverpacks.net/viewtopic.php?pid=4#p4">this thread</a> and post the requested log files?<br />It sounds to me like your XP source is tainted somehow, unless you didn&#039;t follow instructions.<br />iertutil.dll is only for IE-7.&nbsp; You probably integrated ie7 somewhere along the way and it went wrong.<br />When integrated properly with DriverPacks BASE, driver signing policy is disabled for the duration of XP install until after you reach the desktop.&nbsp; If you&#039;re seeing those prompts, you didn&#039;t do something correctly.</p>]]></content>
			<author>
				<name><![CDATA[mr_smartepants]]></name>
				<uri>http://forum.driverpacks.net/profile.php?id=1602</uri>
			</author>
			<updated>2009-02-28T23:26:39Z</updated>
			<id>http://forum.driverpacks.net/viewtopic.php?pid=29668#p29668</id>
		</entry>
</feed>
