unable to install kernal drivers with secureboot enable

nedukull 1 Reputation point
2021-11-23T08:08:38.463+00:00

Hi Team,

Recently we signed drivers with Microsoft after HLK test. While installing the drivers I am getting below error.
[SC] StartService FAILED 2148204812:

A certificate was explicitly revoked by its issuer.

Note : 1) I got a brand new USB EV certificate from Sectigo. I did register my certificate with MicroSoft before signing my application.
2) Performed HLK test and submitted drivers to MicroSoft. MicroSoft also signed my drivers.
3) I rebuild my application with the latest MicroSoft drivers before installing.
4) I have validated all the certificates on the .sys driver level and everything looks good.

Still, I am getting the above certificate error.

Windows Hardware Performance
Windows Hardware Performance
Windows: A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.Hardware Performance: Delivering / providing hardware or hardware systems or adjusting / adapting hardware or hardware systems.
1,544 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Burt Chiang 6 Reputation points
    2021-12-10T09:09:26.64+00:00

    Is the Microsoft signature publisher of your signed driver "Microsoft Window PCA 2010" or "Microsoft Windows Third Party Component CA 2012"?
    Only "Microsoft Windows Third Party Component CA 2012" can work on Secure Boot enabled PC.
    If the publisher of your singed driver is "Microsoft Window PCA 2010", you must resigned your driver and make sure the "Perform test-signing for Win10 and above" is not checked while you upgrading your HLK package.

    1 person found this answer helpful.
  2. Alex Kravchenko 1 Reputation point
    2021-12-09T11:04:05.92+00:00

    Did you find solution to your issue? I'm facing exactly the same situation and problem. I also got a certificate, signed driver, performed HLK testing and got Microsoft signature. sc start service also says that the certificate has been revoked.