search

cezanne / usbip-win

USB/IP for Windows
GNU General Public License v3.0
1.97k stars 350 forks source link

Signed driver? #319

Open josephdunne-eaton opened 2 years ago

josephdunne-eaton commented 2 years ago

Is there any hope of getting a signed driver? My organization has policies set which disallow use of test signed drivers.

paulpv commented 2 years ago

Furthermore, many games with ant-cheat enabled won't run if they detect Windows is in Test Mode.

@cezanne Is there any reasonable workaround for PCs that want to trust this driver to not have to be run in Windows Test Mode?

It seems like test mode is required whenever binding a device.

XIAZY commented 2 years ago

Ditto, I was trying to use the client in a Windows Docker container, therefore impossible to turn on test signing mode and proceed installing unsigned drivers. The USB-IP project obtained code signing from the ReactOS teams, would it be possible to seek help from ReactOS?

PS C:\Users\ContainerAdministrator> bcdedit.exe /set TESTSIGNING ON
The boot configuration data store could not be opened.
PS C:\Users\ContainerAdministrator> ./usbip.exe install
usbip: error: cannot install vhci(ude) driver package
PS C:\Users\ContainerAdministrator> ./usbip.exe install -w
usbip: error: cannot install vhci driver package
Microsoft PnP Utility

Adding driver package:  usbip_vhci_ude.inf
Failed to add driver package: The data is invalid.

Total driver packages:  1
Added driver packages:  0
PS C:\Users\ContainerAdministrator> pnputil -i -a usbip_vhci_ude.inf

Processing inf :            usbip_vhci_ude.inf
Adding the driver package failed : The data is invalid.

Total attempted:              1
Number successfully imported: 0

PS C:\Users\ContainerAdministrator> pnputil -i -a usbip_vhci.inf

Processing inf :            usbip_vhci.inf
Adding the driver package failed : The data is invalid.

Total attempted:              1
Number successfully imported: 0
ashleyw-gh commented 5 months ago

The lack of a signed driver is sadly a no go for most people due to in built in windows security. Is there a possibility for the code to be signed by this organisation? It appears to be zero cost for selective open source projects. https://signpath.org/ https://about.signpath.io/product/open-source ? As I'm sure you know ReactOS no longer offers to sign open source projects any more since 2016, but ironically there was a usbip project signed but that doesn't support server mode and the protocol of the client doesn't seem compatible with mor erecent server processes. https://reactos.org/wiki/Driver_Signing