How to update expired Certificate for Windows IOT

David J 21

In our BSP all drivers are test signed currently with whatever certificates are supplied in Program Files(x86)\Windows Kits\10\tool\certificates folder. Some of these certificates expired 2/1/2022 and now PackageGen fails and we can no longer build an FFU. Where do I find the new certificates? I already tried Update for Windows OEM HAL Extension but this does not fix our build issue. I am not experienced with how certificates work or what to do. Can anyone help? We use Visual Studio 2017 for building our BSP.

Seeya Xi-MSFT 16,471 Reputation points

2022-02-07T08:44:29.203+00:00

Hi @David J ,

Agree with Sean-Liming. We have not received a response from you. Did the reply could help you? If the response helped, do "Accept Answer". If it doesn't work, please let us know the progress. By doing so, it will benefit all community members who are having this similar issue. Your contribution is highly appreciated.

Best regards,
Seeya

Accepted answer

Sean Liming 4,606 Reputation points

2022-02-03T16:26:56.9+00:00

One has to purchase a code signing certificate to build a retail version of Windows IoT Core: https://www.annabooks.com/Articles/Articles_IoT10Core/Windows-10-IoT-Core-Sign-and-Build-Retail-Images-Rev1.3.pdf. It has been a while, but from what I remember, the certificate should sign all the packaged (CAB) items that get built into the image.
Please sign in to rate this answer.

1 person found this answer helpful.
David J 21 Reputation points

2022-02-09T13:34:03.957+00:00

We are not quite to point of building a retail image, we are still building test images until our drivers and user mode application are done. We cannot build the test images anymore due to the certificate expiring. The certificate used in test build seems to come from the WDK (version 1809 build:17763). While on the topic of the retail build is it possible to create a retail image without purchasing a code signing certificate? This is a closed system.

Sean Liming 4,606 Reputation points

2022-02-09T17:01:34.39+00:00

The whole test certificate expiring issue is an old one. I ran into this myself with another older version, and I brought it up as pain point for development. I am not sure if anyone in the product group is paying attention to this one. I recommend that you contact a Microsoft distributor to push to get an answer.

As far as a retail build, you have to purchase the code signing certificate.

David J 21 Reputation points

2022-02-09T19:00:11.65+00:00

Thank you Sean for your help. I will try to reach out to a Microsoft distributor and see what help I can get.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Your answer

Share via

How to update expired Certificate for Windows IOT

0 additional answers

Your answer