Re: Sign CSP in Win XP

From: Ryan Menezes [MSFT] (ryanmen_at_online.microsoft.com)
Date: 08/10/04

  • Next message: JH: "Basics of encryption with CryptoAPI"
    Date: Tue, 10 Aug 2004 01:24:28 -0700
    
    

    The bottom line here is that Microsoft does not support supplying patched
    advapi32.dll any more. So cspsign.exe from the CSPDK is of no use since it
    relies on having a patched advapi.

    Microsoft recommends attaching a kernel debugger to the machine externally.

    -- 
    Thanks,
    Ryan Menezes [MS]
    This posting is provided "AS IS" with no warranties, and confers no rights.
    "henghuei@yahoo.com" <henghueiyahoocom@discussions.microsoft.com> wrote in
    message news:B45AD75B-3914-4E41-B9E7-670D4EDF4ED6@microsoft.com...
    > The cspsign.exe from CSPDK only supported Windows 2000 SP1/SP2 to sign
    > my CSP. What can I do if I want to install my CSP in Win XP? Can I
    > sign my CSP with advapi32.dll in WinXP? I tried to use
    > cspsign.exe to sign my CSP in Win XP, but it did not work.
    > Note: What I want is to find out is how to sign my CSP in WinXP.
    >         I am not referring to debugging CSP as Lazzlo Elteto suggested in
    > his answer.
    >
    > By the way, is there an advapi32.dll for WinXP. If the answer is yes,
    > where can I get the dll?
    >
    >
    > "Ryan Menezes [MSFT]" wrote:
    >
    > > I guess you are referring to advapi32.dll (advapi does the signature
    check
    > > before loading a CSP). See CSPDK for details on how to do this for
    earlier
    > > platforms.
    > >
    > > -- 
    > > Thanks,
    > > Ryan Menezes [MS]
    > > This posting is provided "AS IS" with no warranties, and confers no
    rights.
    > >
    > >
    > > "lelteto" <lelteto@discussions.microsoft.com> wrote in message
    > > news:99C31DBC-88F7-4F49-9ABF-D053B96E5EB3@microsoft.com...
    > > > You can either use kernel debugger (and 2nd computer) or you may patch
    the
    > > kernel32.dll. For the latter please check for previous posts (search for
    > > kernel32.dll).
    > > >
    > > > Laszlo Elteto
    > > > SafeNet, Inc.
    > > >
    > > > "henghuei@yahoo.com" wrote:
    > > >
    > > > > We are implementing CSP. It can only sign with Win2000 SP1/SP2.
    > > > > Is there any way to sign our CSP with higher versions of SP or OS
    > > > > such as WinXP or Win2003 system?
    > > > >
    > >
    > >
    > >
    >
    >
    >
    >
    >
    >
    > Manage Your Profile |Legal |Contact Us |MSDN Flash Newsletter
    > ©2004 Microsoft Corporation. All rights reserved. Terms of Use |Trademarks
    > |Privacy Statement
    >
    

  • Next message: JH: "Basics of encryption with CryptoAPI"

    Relevant Pages

    • Sign CSP in Win XP
      ... The cspsign.exe from CSPDK only supported Windows 2000 SP1/SP2 to sign ... What can I do if I want to install my CSP in Win XP? ... What I want is to find out is how to sign my CSP in WinXP. ...
      (microsoft.public.platformsdk.security)
    • Re: sign with CSP
      ... The cspsign.exe from CSPDK only supported Windows 2000 SP1/SP2 to sign ... What can I do if I want to install my CSP in Win XP? ... What I want is to find out is how to sign my CSP in WinXP. ...
      (microsoft.public.platformsdk.security)
    • Re: Callback function to handle CRYPT_USER_PROTECTED action
      ... The precise behavior is specified by the CSP being used". ... how easy it is to hook a CSP but my guess is it prob. ... CryptoSPI calls should I monitor and intercept? ... > Microsoft is providing this information as a convenience to you. ...
      (microsoft.public.platformsdk.security)
    • Re: Coredll patch Windows CE 4.21
      ... - I have a CSP developed for Windows XP which allow to use a concrete type ... The problem is that Microsoft don't allow to use a new CSP ... I have an older version of this coredll patched, the v2.11, provided ... Could I use the platform builder to do these tests?. ...
      (microsoft.public.windowsce.platbuilder)
    • Re: CSP DLL Signed by Microsoft: Signature not recognised by Certificate Services
      ... We have had the CSP signed by Microsoft for Production. ... The Certificate Services running on Windows Server 2003 do not recognise the signature. ... We've scoured MSDN and this newsgroup, and even asked Microsoft directly, but to no avail. ...
      (microsoft.public.platformsdk.security)

    Loading