INTERACT FORUM

More => Old Versions => JRiver Media Center 24 for Windows => Topic started by: macallan18 on June 01, 2018, 11:55:25 am

Title: What will it take to get the WDM driver digitally signed?
Post by: macallan18 on June 01, 2018, 11:55:25 am: I have owned jriver for a number of years and love the product. However, I only use it on my work system to listen to music at work. Turning off secure boot would work on a home system, but would violate company security policies.

I've read various threads that refer to the process of getting the WDM driver digitally signed as having "absurd requirements", "very expensive", "something we are unable to do", etc. What is the actual cost and issue, and is this something you could possibly do for your loyal customers?

Would it require a kickstarter? From googling, it appears the cost is 400 dollars, which shouldn't be difficult to come up with.
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: macallan18 on June 01, 2018, 01:56:07 pm: According to this, it can be done for 178 per year:

https://www.digicert.com/code-signing/driver-signing-certificates.htm
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: Awesome Donkey on June 01, 2018, 02:01:29 pm: The WDM driver is already digitally signed. The issue is one of the Windows 10 updates Microsoft drastically increased the signing requirements which JRiver isn't currently able to provide.

https://yabb.jriver.com/interact/index.php/topic,113875.0.html

Probably gotta wait until they can do it.
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: Hendrik on June 01, 2018, 02:03:24 pm: The cost is only one factor among many why we're not currently able to sign the driver that way. This may change in the future.

PS:
The certificate you linked is not eligible for the new Windows 10 requirements. We have one of those "simple" ones, thats what we use now.
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: macallan18 on June 01, 2018, 02:30:25 pm: So what are the factors aside from cost, and how much is the cost? I get it, Microsoft sucks and anyone who has to work with them will have anecdotes to confirm it, but this is literally all I use MC for. Not fun listening to music without running it through my favorite plugins.
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: macallan18 on June 01, 2018, 03:00:18 pm: This company sells a WDM driver, and their most recent update includes the EV Cert. It would be great if JRiver could state if this is something they plan on resolving this year, next year, or never.
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: Awesome Donkey on June 01, 2018, 03:32:42 pm: Oh, so it requires an EV certificate. Yeah, those can be a PITA.
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: JimH on June 01, 2018, 03:42:51 pm: This is a problem that Microsoft created. There is a chance they will fix it.
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: macallan18 on June 01, 2018, 04:32:01 pm: Quote from: JimH on June 01, 2018, 03:42:51 pm
This is a problem that Microsoft created. There is a chance they will fix it.

Or you could buy an EV certificate for 215:

https://www.sslshopper.com/cheapest-ev-ssl-certificates.html

Unless you know something I don't there is almost zero chance MS will change their stance on this. I get that it's annoying but I also see this as the cost of doing business and supporting Windows users.
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: Hendrik on June 01, 2018, 04:33:50 pm: Quote from: JimH on June 01, 2018, 03:42:51 pm
This is a problem that Microsoft created. There is a chance they will fix it.

Microsoft considers this the fix, not a problem, so thats not going to happen.
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: leezer3 on June 01, 2018, 04:45:49 pm: Have you tried turning secure boot off?
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: JimH on June 01, 2018, 05:00:54 pm: Quote from: Hendrik on June 01, 2018, 04:33:50 pm
Microsoft considers this the fix, not a problem, so thats not going to happen.
They thought that removing the Start button was a good idea, too.

Vista, Clippy, phones, Ballmer, etc. They sometimes reverse their course.

macallan18, you made your point several times.
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: macallan18 on June 01, 2018, 05:28:31 pm: I was hoping to get a clear answer, so I'd know if I should spend the 50 dollars or not. Is it safe to say that you will not be digitally signing the driver before the end of 2019? If the answer is yes, I'll go buy it. I just don't want to spend the money and then seen a signed driver from JRiver two weeks later.
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: Awesome Donkey on June 01, 2018, 05:35:47 pm: Quote from: macallan18 on June 01, 2018, 05:28:31 pm
Is it safe to say that you will not be digitally signing the driver before the end of 2019?

Again, the WDM driver is already signed...

(https://i.imgur.com/5Vosytn.png)

Just not with an EV certificate. From what I know about those, they can be a hassle to deal with in regards to driver signing, especially after reading this: https://www.digicert.com/code-signing/ev-code-signing-kernel-mode-drivers.htm
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: macallan18 on June 01, 2018, 05:38:27 pm: Yes, it's signed but unfortunately it won't work with SecureBoot, and I can't turn SecureBoot off on this system. Perhaps a better question is "will the driver work with secureboot in the next 18 months", and if it won't, I can buy an alternative that will. If it's something that the devs actually want to fix, I will hold off.
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: ~OHM~ on June 01, 2018, 05:55:52 pm: ya better hold off...I would
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: RD James on June 01, 2018, 06:11:39 pm: Quote from: JimH on June 01, 2018, 03:42:51 pm
This is a problem that Microsoft created. There is a chance they will fix it.
They are not going to start removing security features from Windows 10 that have been in place since 2016.
The last two updates for Windows have had an increased focus on security.
Title: Re: What will it take to get the WDM driver digitally signed?
Post by: swiv3d on June 01, 2018, 06:27:40 pm: If you are selling a product it should work within the defined parameters of the system you are operating in.