Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[macallan18]

I have owned jriver for a number of years and love the product.  However, I only use it on my work system to listen to music at work.  Turning off secure boot would work on a home system, but would violate company security policies.

I've read various threads that refer to the process of getting the WDM driver digitally signed as having "absurd requirements", "very expensive", "something we are unable to do", etc.  What is the actual cost and issue, and is this something you could possibly do for your loyal customers?

Would it require a kickstarter?  From googling, it appears the cost is 400 dollars, which shouldn't be difficult to come up with.

[macallan18]

According to this, it can be done for 178 per year:

https://www.digicert.com/code-signing/driver-signing-certificates.htm

[Awesome Donkey]

The WDM driver is already digitally signed. The issue is one of the Windows 10 updates Microsoft drastically increased the signing requirements which JRiver isn't currently able to provide.

https://yabb.jriver.com/interact/index.php/topic,113875.0.html

Probably gotta wait until they can do it.

[Hendrik]

The cost is only one factor among many why we're not currently able to sign the driver that way. This may change in the future.

PS:
The certificate you linked is not eligible for the new Windows 10 requirements. We have one of those "simple" ones, thats what we use now.

[macallan18]

So what are the factors aside from cost, and how much is the cost?  I get it, Microsoft sucks and anyone who has to work with them will have anecdotes to confirm it, but this is literally all I use MC for.  Not fun listening to music without running it through my favorite plugins.

[macallan18]

This company sells a WDM driver, and their most recent update includes the EV Cert.  It would be great if JRiver could state if this is something they plan on resolving this year, next year, or never.

[Awesome Donkey]

Oh, so it requires an EV certificate. Yeah, those can be a PITA.

[JimH]

This is a problem that Microsoft created.  There is a chance they will fix it.

[macallan18]

This is a problem that Microsoft created.  There is a chance they will fix it.

Or you could buy an EV certificate for 215:

https://www.sslshopper.com/cheapest-ev-ssl-certificates.html

Unless you know something I don't there is almost zero chance MS will change their stance on this.  I get that it's annoying but I also see this as the cost of doing business and supporting Windows users.

[Hendrik]

This is a problem that Microsoft created.  There is a chance they will fix it.

Microsoft considers this the fix, not a problem, so thats not going to happen.

[leezer3]

Have you tried turning secure boot off?

[JimH]

Microsoft considers this the fix, not a problem, so thats not going to happen.

They thought that removing the Start button was a good idea, too.

Vista, Clippy, phones, Ballmer, etc.  They sometimes reverse their course.

macallan18, you made your point several times.

[macallan18]

I was hoping to get a clear answer, so I'd know if I should spend the 50 dollars or not.  Is it safe to say that you will not be digitally signing the driver before the end of 2019?  If the answer is yes, I'll go buy it.  I just don't want to spend the money and then seen a signed driver from JRiver two weeks later.

[Awesome Donkey]

Is it safe to say that you will not be digitally signing the driver before the end of 2019?

Again, the WDM driver is already signed...



Just not with an EV certificate. From what I know about those, they can be a hassle to deal with in regards to driver signing, especially after reading this: https://www.digicert.com/code-signing/ev-code-signing-kernel-mode-drivers.htm

[macallan18]

Yes, it's signed but unfortunately it won't work with SecureBoot, and I can't turn SecureBoot off on this system.  Perhaps a better question is "will the driver work with secureboot in the next 18 months", and if it won't, I can buy an alternative that will.  If it's something that the devs actually want to fix, I will hold off.

[~OHM~]

ya better hold off...I would

[RD James]

This is a problem that Microsoft created.  There is a chance they will fix it.

They are not going to start removing security features from Windows 10 that have been in place since 2016.
The last two updates for Windows have had an increased focus on security.

[swiv3d]

If you are selling a product it should work within the defined parameters of the system you are operating in.