Saturday, September 1, 2012

Windows 8 x64 driver installation error - signature test fails

When you install the driver for Hitron BRG 35302 cable modem on Windows 8 x64, you get an error message "The hash for the file is not present in the specified catalog file. The file is likely corrupt or the victim of tampering". Then the installation process stops.

To solve it, turn the Windows 8 checking of the driver's signature off.


Solution:

1. Press Alt-I to open a Settings panel. Chose PC Settings  (in the bottom) - Advanced startup - Restart now.

On the blue screen select Troubleshoot, Advanced options, Startup Settings. Click Restart button.

2. When computer is rebooting the blue screen with Startup settings appears. Choose the 7th bullet "Disable driver signature enforcement".

3. After computer is started just repeat the driver installation process. But this time the Windows Security dialog pops up with a "Windows can't verify publisher of this driver software" warning.

Choose Install the driver software anyway.
4. The driver is installed.

The approaches I tried which do NOT help.

The Windows documentation which describes the original error states:
Windows requires a digitally signed driver. A driver that lacks a valid digital signature, or has a signature that was changed after it was signed, can't be installed on 64-bit versions of Windows. You'll only see this notification if you have a 64-bit version of Windows and try to install such a driver on it.

I wonder why 64 and 32 bit OSs handle a driver's signature differently...

To disable/enable driver signing as well as turning test signing on (seems to be an alternative approach) type:
bcdedit.exe /set loadoptions DISABLE_INTEGRITY_CHECKS
bcdedit.exe /deletevalue loadoptions      -- to undo the previous command
bcdedit.exe /set testsigning ON
bcdedit.exe /set testsigning OFF          -- to undo the previous command
Computer reboot is required.

The initial problem persists even if the driver is signed and the certificate is installed in the certificate store. The recipe is outlined below:
To create a certificate use SelfCert.exe utility which ships with Office 12. It is in the "c:\Program Files\Microsoft Office\Office12\SELFCERT.EXE".

To sign the .sys files of the driver use SignTool.exe which ships with Windows SDK.
signtool.exe sign /i RedGreenBlue c:\Hitron35302_x64\usb8023w.sys
The "RedGreenBlue" is the name of the certificate.

To install the certificate:  right click on the signed .sys file - Properties - Digital Signatures. Choose the certificate name - Details - View Certificate - Install Certificate - Local Machine - Next - "Automatically select the certificate store based on the type of certificate" - Next - Finish.

To create the driver's .cat file use Inf2Cat utility which ships with Windows Driver Kit (WDK).
Inf2Cat.exe /driver:C:\Hitron35302_x64 /os:7_X86,7_X64,8_X86,8_X64
The driver parameter points to the folder with inf/sys/cat driver files.

To see "Local Security Policy" configuration select Control Panel - Administrative Tools - Local Security Policy. Then select Security Settings - Public Key Policies and in the right frame choose "Certificate Vath Validation Settings". The check box "Allow user trust root (CA) to be used to validate certificates" (CA=certification authority) seems to be useful if you install certificate on user level instead of a local machine level.

29 comments:

  1. I've heard about several cases of Windows 8 installation problems because of digital signature test failure. This article supplies working solution of the problem. It will help for many users. Thank you very much.

    ReplyDelete
  2. this certainly works, thanks for the solution!

    ReplyDelete
  3. still with a problem !! driver not intended for this platform !! how do i solve it now

    ReplyDelete
  4. Another THANK YOU!! This was the final step in solving many system instabilities I was having because I couldn't quite get a particular network card to function on a server OS with the proper drivers (Intel 82579V).

    ReplyDelete
  5. Our team member are fix all type error and complete solution of your problem. Go through this url.
    Fix Windows 7 Error 1068
    Thank you
    Aalia lyon

    ReplyDelete
  6. Hey I had the same issue with my computer. I wasted my time on it for
    many days but finally I got a solution from this link
    http://www.microsoftliveassist.com/cant-verify-the-signature-install-error-in-office-2013/

    ReplyDelete
  7. This article supplies working solution of the problem. It will help for many users. Thank you very much.

    digital certificate

    ReplyDelete
  8. I guess the short version of these instructions would be to install unsigned drivers in Windows Safe Mode.

    ReplyDelete
  9. This comment has been removed by a blog administrator.

    ReplyDelete
  10. This comment has been removed by a blog administrator.

    ReplyDelete
  11. This comment has been removed by a blog administrator.

    ReplyDelete
  12. This comment has been removed by a blog administrator.

    ReplyDelete
  13. This comment has been removed by a blog administrator.

    ReplyDelete
  14. This comment has been removed by a blog administrator.

    ReplyDelete
  15. This comment has been removed by a blog administrator.

    ReplyDelete
  16. This comment has been removed by a blog administrator.

    ReplyDelete
  17. This comment has been removed by a blog administrator.

    ReplyDelete
  18. This comment has been removed by a blog administrator.

    ReplyDelete
  19. This comment has been removed by a blog administrator.

    ReplyDelete
  20. This comment has been removed by a blog administrator.

    ReplyDelete
  21. This comment has been removed by a blog administrator.

    ReplyDelete
  22. This comment has been removed by a blog administrator.

    ReplyDelete
  23. This comment has been removed by a blog administrator.

    ReplyDelete
  24. I hope you choose www.funkinyes.com since they are the best online site Besides, they provided genuine keys to me.I am very appreciated. Great work! Strongly recommended.

    ReplyDelete
  25. This comment has been removed by a blog administrator.

    ReplyDelete