Driver Signature verification failing on Windows 2012 and 2012R2 but not on Windows 2016 and 19

Question

The driver files like .sys are signed with Digicert.
Using NSI script to create driver installation package
Have performed HLK tests and got Microsoft signature.
Again signed the driver with Digicert and sha256 algorithm
Driver installation and other operations are working fine but when we try to upgrade driver, Windows 2012 and 2012R2 give driver signature failure error.

Answer 1

Hi @Yashraj Pinjari

Thank you for posting your question to Microsoft Q&A forum.

When a driver signing failure error occurs, is there a relevant Event log in event viewer?

For driver development related questions, you can try the Hardware Dev Center forum for help.

https://social.msdn.microsoft.com/Forums/windowshardware/en-US/home?forum=wdk

Best Regards,
Wesley Li

Answer 2

Hello there,

Is the hardware on both the servers same?

This issue might occur due to custom out-of-box-experience (OOBE) update.

This OOBE update is installed through Deployment Imaging and Management (DISM) and has a special rename operation that replaces the main OOBE feature. This replacement causes the digital signature error.

You can follow this article for more information https://learn.microsoft.com/en-us/troubleshoot/windows-client/deployment/windows-cannot-verify-the-digital-signature-for-this-file

You can also try to Disable Driver Signature Enforcement and see if that helps.

-----------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer--