Changes between Version 38 and Version 39 of BuildingTapWindows6


Ignore:
Timestamp:
04/06/19 07:08:49 (3 years ago)
Author:
Samuli Seppänen
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • BuildingTapWindows6

    v38 v39  
    105105}}}
    106106
    107 Add a DDF file which is used to create the cabinet file. For example:
    108 
    109 {{{
    110 ; tap-windows6.ddf
     107Next you need to create three DDF files, one for each architecture (x86, x64, arm64), which are used to create the cabined files. Here's an example for amd64:
     108
     109{{{
     110; tap-windows6-amd64.ddf
    111111;
    112112.OPTION EXPLICIT     ; Generate errors
    … …  
    121121.Set Compress=on
    122122;Specify file name for new cab file
    123 .Set CabinetNameTemplate=tap-windows6.cab
     123.Set CabinetNameTemplate=tap-windows6-amd64.cab
    124124;Specify files to be included in cab file
    125 .Set DestinationDir=i386
    126 C:\users\sign\opt\sign-tap6\tap6\i386\tap0901.sys
    127 C:\users\sign\opt\sign-tap6\tap6\i386\OemVista.inf
    128125.Set DestinationDir=amd64
    129126C:\users\sign\opt\sign-tap6\tap6\amd64\tap0901.sys
    130127C:\users\sign\opt\sign-tap6\tap6\amd64\OemVista.inf
    131 .Set DestinationDir=arm64
    132 C:\users\sign\opt\sign-tap6\tap6\arm64\tap0901.sys
    133 C:\users\sign\opt\sign-tap6\tap6\arm64\OemVista.inf
    134128}}}
    135129
    … …  
    137131
    138132{{{
    139 makecab.exe /f "C:\Users\sign\opt\sign-tap6\tap-windows6.ddf"
     133makecab.exe /f "C:\Users\sign\opt\sign-tap6\tap-windows6-amd64.ddf"
    140134}}}
    141135
    … …  
    143137
    144138{{{
    145 SignTool sign /ac "C:\Users\sign\opt\sign-tap6\digicert-high-assurance-ev.crt" /s MY /n "OpenVPN" /fd sha256 /tr http://timestamp.digicert.com /td sha256 /v "C:\Users\sign\opt\sign-tap6\disk1\tap-windows6.cab"
    146 }}}
    147 
    148 Now you have a signed cabined file.
    149 
    150 Finally submit the signed cabined file to Windows Dev Center for attestation signing.
     139SignTool sign /ac "C:\Users\sign\opt\sign-tap6\digicert-high-assurance-ev.crt" /s MY /n "OpenVPN" /fd sha256 /tr http://timestamp.digicert.com /td sha256 /v "C:\Users\sign\opt\sign-tap6\disk1\tap-windows6-amd64.cab"
     140}}}
     141
     142For other platforms just replace "amd64" with "i386" or "arm64". After this process you have three signed cabined files.
     143
     144Now submit each one individually to Windows Dev Center for attestation signing. Make sure to check only the applicable platforms in the "Requested signatures" section. If all goes well, you can click "More" at the right of your submission below "Package and signing properties" and download a ZIP file with signed driver files.
     145
     146Once you have the signed driver files you may want to wrap them into an installer.
    151147
    152148For more generic instructions and more details please refer to the [https://docs.microsoft.com/en-us/windows-hardware/drivers/dashboard/attestation-signing-a-kernel-driver-for-public-release official MS documentation] on attestation signing.