Re: Signing CSP and Certification Authority

From: andrew (anonymous_at_discussions.microsoft.com)
Date: 01/30/04 

Date: Fri, 30 Jan 2004 11:11:07 -0800

David,

Can you offer some hints on how to use a kernel debugger for CSP testing. We are just starting our CSP development right now.

Thanks,

Andrew
 
     ----- David Cross [MS] wrote: -----
     
     it could also be an issue with your CSP...
     
     to be sure, attach a kernel debugger to the system which should invalidate
     the need for the signature on the CSP. Note that with Windows 2000 SP3 and
     later, you can no longer test sign and use the test advapi32.ll - you must
     either a real signature or attach a kernel debugger.
     
     This test tool should help you:
     
     http://www.microsoft.com/downloads/details.aspx?FamilyID=5f3872f8-202e-4f13-b495-78ce6f17a84f&DisplayLang=en
     
     
     
     David B. Cross [MS]
     
     --
     This posting is provided "AS IS" with no warranties, and confers no rights.
     
     http://support.microsoft.com
     
     "Nick" <anonymous@discussions.microsoft.com> wrote in message
     news:01613B61-A4E9-4315-B829-731AF77C9399@microsoft.com...
> Hi all,
>> We are developing own CSP and need to embed it in Certification Authority.
     Up to now we were using the Sign.exe utility from CSPDK for test signing our
     CSP while debugging the latter under Windows 2000 Server with SP1. However
     after binding our CSP with Certification Authority we are getting the error
     message "Invalid Signature. 0x80090006 (-2146893818)" while starting
     Certification Authority. Does it mean that Certification Authority accepts
     only a genuine Microsoft signature rather than a test signature of a CSP?
> Thanks in advance.
>> Nick
     
     
     

Relevant Pages

  • Re: Signing CSP and Certification Authority
    ... it could also be an issue with your CSP... ... either a real signature or attach a kernel debugger. ... > We are developing own CSP and need to embed it in Certification Authority. ...
    (microsoft.public.platformsdk.security)
  • Re: Coredll patch Windows CE 4.21
    ... you first create a Windows CE project based on the ARM emulator. ... Debugging a CSP is similar to debugging ... windows ce images/apps using platform builder and arm emulator. ... > the platform builder and activating the flag "Enable Kernel Debugger" ...
    (microsoft.public.windowsce.platbuilder)
  • Re: Signing CSP and Certification Authority
    ... If both the conditions are true, it will bypass CSP signature check and even ... > Can you offer some hints on how to use a kernel debugger for CSP testing. ... > after binding our CSP with Certification Authority we are getting the ...
    (microsoft.public.platformsdk.security)
  • RE: How to install and test custom CSP
    ... I use WinDbg's kernel mode on two computers, host and target, ... and I can use un-signed CSP on target computer. ... "hamilton" wrote: ... the SAME machine as the kernel debugger is running. ...
    (microsoft.public.platformsdk.security)
  • Re: How to connect to the target system to debug CSP
    ... Have you configured the Kernel Debugger on the other machine? ... then set Baud rate and COM port and then restart the other machine. ... > of my CSP or CSP test suite). ... > I have set the communication between both systems and both are XP SP1. ...
    (microsoft.public.platformsdk.security)