search

valinet / ssde

SSDE is a collection of utilities that help in having Windows load your custom signed kernel drivers when Secure Boot is on and you own the system's platform key, instead of using test mode.
MIT License
170 stars 35 forks source link

confusion #1

Closed InanimateCrbnRod closed 3 years ago

InanimateCrbnRod commented 3 years ago

Hi, sorry! Newb here. I am trying to run a driver that no longer works outside of test mode. I don't wish to leave test mode enabled. This program seems like a solution but the instructions are very confusing and seem to start in the middle of the process. is there a slightly more noob friendly readme? I'm pretty smart in general, but the language in the readme seems to be assuming information I'm clearly missing. Thank you so much for your time!

valinet commented 3 years ago

What is the pat where you get lost? The process is pretty advanced on its own. Also, it is good to start reading with the 2 linked articles, my README file represents just notes regarding the process described especially in article 2.

InanimateCrbnRod commented 3 years ago

ah I missed the articles. (I'm a skimmer). is this the article in question? https://www.geoffchappell.com/notes/windows/license/customkernelsigners.htm

If so I'll read it later this weekend when I have time. Thank you! Also, do I have to be the person who made the driver? this is the driver in question I'm trying to use: https://github.com/eiz/SynchronousAudioRouter

Apparently you can't get an EV anymore without $400 AND you have to be a corporation. talk about gatekeeping.

valinet commented 3 years ago

You don't have to have the source of the driver. This just allows to self sign the driver with a key that's first descendant of the platform key installed in Secure Boot and have it load by Windows without test mode. This functionality is built into Windows but it is not licensed to end users of the regular editions (Home, Pro, Enterprise, Education etc) but only to users of Windows 10 China Government Edition. For obvious reasons. You have to be a communist and have an entire billion people+ country to spy on to have almost anyone (and especially those who brag about how they care about the democratic values) bend in front of you and offer the tools necessary. Microsoft does not let regular people run whatever code they want, only can they do so when the financial interest gets ahead of any ethics or principle.

InanimateCrbnRod commented 3 years ago

okay gotcha. I'm trying to learn about how to change the platform key on my bios (asus z490 tuf mobo). Quick question, if I did this would I then have to re-install all of my drivers using ssde? including all future drivers? Or worse, would I have to reinstall windows??? thanks.

valinet commented 3 years ago

C'mon, do some reading on your own, and try to understand things before blindly attempting anything. Do you know what the platform key is? Do you know what Secure Boot is? Read a bit about it, how it works and what purpose it serves before rushing into advanced stuff. "Install all of my drivers using ssde" makes no sense. Do some reading, as I said, so you understand what we are talking about. "Reinstall Windows" - why?

InanimateCrbnRod commented 3 years ago

Hey sorry I'm doing this while mutli-tasking and this kind of stuff isn't my expertise. I won't comment again until I've read the articles but it is not super easy to understand for a casual user like me. I know what the platform key is, and what secure boot is. I am not fully understanding everything that ssde does, but I'm sure I'll get it when I have time to read the article. I mentioned on the github page for the driver I'm having an issue with about using SSDE, and someone on there commented saying I'd have to reinstall all of my drivers, which is why I brought it up. I really just want to use this damn driver, I don't care for learning about any of this stuff personally,m but I appreciate the help you've given me so far.

valinet commented 3 years ago

I mean, I ask you again, what is the part that you do not understand? Create a certificate, use it as platform key, then sign any driver with it or a direct descendant of it as recommended in the guide, and that's pretty much it, you're good to go. Only thing left is, load this ssde driver somehow (2 methods offered in the article) so that Windows gets licensed for this feature where it loads drivers signed with the PK of the machine without test mode. I don't know what more to say. It is hard to automate it, and personally it serves me no purpose as I can do it manually very now and then. I am also not a software company, I just publish here stuff that helped me in the hope that it will help others, but I cannot provide installers and 24/7 phone line support. For this to get easier, petition Microsoft to license this on regular Windows editions as well. But again, I still don't understand what you do not understand. Don't read the articles if you don't want to, but probably you won't exactly know what to do... there is no noob friendly write up, maybe after you figure out you could help other out by writing one. Can you please give me a link to the discussion where that person said you had to reinstall all your drivers? I don't understand why someone has to spread misinformation when they clearly don't know what they are talking about. Thanks.

InanimateCrbnRod commented 3 years ago

Hey thanks, your explanation was excellent, I can just run a scheduled task to load ssde. I didn't mean for this to turn into a big ordeal or upset you in any way. Its really difficult for me to read long technical articles because i have severe adult adhd. Maybe I will write a step-by-step noob guide and link it. As for the other individual they have since clarified their remarks. Thanks for the tool, and the assistance, have a good night.

valinet commented 3 years ago

You cannot have a scheduled task load ssde. It is too late then. ssde is a kernel mode driver, not a user mode (regular) application. It won't load, as it is custom signed. For it to load and be successful, you have to load it during boot, when the bootloader loads Windows and its drivers. Firstly time, you trick the bootloader into thinking the feature is licensed, then, after the driver successfully loads, it will keep the feature licensed and so at subsequent boots, the ssde driver will be able to still load along with any custom signed drivers you want to load. As I said, it is not very easy to do/explain, that's why I wanted to make sure you understand what you do. If you are not careful, you'll end up blue screening Windows and won't know what to do to get out because you won't know what caused it. If you want a simpler alternative, just run test mode. You haven't upset me, no worries, but A LOT of people ask questions first and then only think of reading the provided documents, so it becomes irritating for the author/curator. I understand your condition, and thus I am again recommending that you familiarize with the stuff you want to do, or else just go for test mode. Some of the steps really involve paying attention as otherwise things will get screwed up.

InanimateCrbnRod commented 3 years ago

Thank you. I'm going to read the articles tomorrow when I'm free, unfortunately I also game on this computer so turning test mode on and off would be annoying. (anticheat). I think if I can get this to work it will be the better alternative, I'll research and be careful and report back with my success. Thanks!