Share via

Which certificate store would be used for code signing of Windows 10 Device Drivers on VS2015 using DigiCert USB Code Signing Token.

Bob Kuech 0 Reputation points
2024-05-13T17:24:02.6033333+00:00

Regarding Windows device driver development, which Windows 10 Certificate Store should my company's 'DigiCert Trusted G4 Code RSA4096 SHA384 CA1' be visible in? (Using a hardware USB token)

My DigiCert code signing certificate is visible in my Personal Certificates store if my USB token in installed while using Certificate Manager.

I am using Visual Studio 2015 to build and sign Windows 10 device drivers.

If I start VS2015 and select Driver Test Signing, the DigiCert certificate is visible in my Driver Store in the VS2015 selection box and I can use it to sign drivers.

If I start VS2015 and select Production Driver Signing, the certificate is not visible in my Driver Store in the VS2015 selection box and I cannot select it. If I open the certificate with the Certificate Manager, everything indicates the certificate is ok.

What do I need to do to use my G4 Certificate? I went through DigiCert technical support and as far as they could tell, everything was ok.

Does it need to be placed in another certificate store for the Production code signing to work and can I just copy it from one store to another with mmc ?

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,806 questions
Windows Driver Kit (WDK)
Windows Driver Kit (WDK)
A set of Microsoft tools that are used to develop, test, and deploy Windows drivers.
16 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Daisy Zhou 19,271 Reputation points Microsoft Vendor
    2024-05-14T08:00:13.5566667+00:00

    Hello Bob Kuech,

    Thank you for posting in Q&A forum.

    For code signing of Windows 10 Device Drivers on VS2015 using DigiCert USB Code Signing Token, you would use the "Trusted Publishers" certificate store. This store is used to store certificates that are used to sign code and is specifically designed for code signing purposes.

    For example:

    User's image

    Does it need to be placed in another certificate store for the Production code signing to work and can I just copy it from one store to another with mmc ?

    A: Yes, you can copy it from one store to another with mmc, but we always put the certificate to correct store.

    If you have placed the certificate in an incorrect store location, then you can delete it in that location.

    Note: If you have no certificate file backup, please export this certificate and save it before you delete it from Windows store.

    I hope the information above is helpful.

    If you have any questions or concerns, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.