Edit

Verifying the Test Signature

  • Article

After the test certificate is copied to the Trusted Root Certification Authorities certificate store on the test computer, SignTool can be used to do the following:

  • Verify the signature of a specified file in a driver package's catalog files.

  • Verify the embedded signature of a kernel-mode binary file, such as a boot-start driver.

The following example verifies the signature for one of the files, toastpkg.inf, in the Toastpkg sample's signed catalog file, tstamd64.cat. For more information about how this catalog file was created, see Using Inf2Cat to Create a Catalog File:

Signtool verify /pa /v /c tstamd64.cat toastpkg.inf

Where:

  • The verify command configures SignTool to verify the specified file, toastpkg.inf.

  • The /pa option specifies the use of the Authenticode verification policy when verifying the digital signature.

  • The /v option enables verbose operations, in which SignTool displays successful execution and warning messages.

  • The /c option specifies the catalog file name.

    Note  When verifying the signature of an embedded-signed kernel-mode binary file, do not use the /c argument.

  • toastpkg.inf specifies the name of the file to be verified.

The following example verifies the signature of the Toastpkg sample's signed catalog file, Tstamd64.cat:

Signtool verify /pa /v tstamd64.cat

For more information about how to use SignTool to verify a digital signature of a catalog file, see Verifying the Signature of a Test-Signed Catalog File.