Signing a Windows Kernel driver without using Microsoft

[Fyyre]

Originally Posted by DavidXanatos

Using a custom kernel signer really gives you the best combination of security and freedom, to bad MSFT want's only the Chinese government to have this.

I assume the CCP edition of Windows 10 x64 has such a custom signer? I'm curious if anyone has performed a deep dive comparison between Windows 10 1809 CCP and version for other countries.

[DavidXanatos]

Originally Posted by Fyyre

I assume the CCP edition of Windows 10 x64 has such a custom signer? I'm curious if anyone has performed a deep dive comparison between Windows 10 1809 CCP and version for other countries.

Well as described here: https://www.geoffchappell.com/notes/windows/license/customkernelsigners.htm
Its not like the CCP edition is different, its just a licensing restriction, you can trick any non CCP windows into enabling this, but the licensing service will disable it for the next reboot. So you need a driver to block that from happening. As described here: https://github.com/HyperSine/Windows10-CustomKernelSigners

[KNARZ]

Originally Posted by DavidXanatos

Well as described here: https://www.geoffchappell.com/notes/windows/license/customkernelsigners.htm
Its not like the CCP edition is different, its just a licensing restriction, you can trick any non CCP windows into enabling this, but the licensing service will disable it for the next reboot. So you need a driver to block that from happening. As described here: https://github.com/HyperSine/Windows10-CustomKernelSigners

With SLShim you can overcome it way more easy. But I dont know if this workaround will still work. Unfortunatly the original repo was taken down but you can find it forked via google.

Original repo hxxps://github.com/vyvojar/slshim
His other repos are also about spp.

I worked with him as a tester while he was developing it. Somewhere I will have the latest version of his patch. If requested I can search it.

[DavidXanatos]

Originally Posted by KNARZ

If requested I can search it.

yes please

[KNARZ]

hxxps://www.xup.in/dl,20255033/slshim-master.zip/
btw. I could need some more reputation in this board ^^