Thursday 6 August 2015

THE TESTISGNING BOOT CONFIGRATION OPTION

THE   TEST SIGNING BOOT  CONFIGRATION OPTION DETERMINES WHETHER WINDOWS VISTA AND LATER VERSION OF WINDOWS WILL LOAD ANY TYPE OF TEST-SIGNED KERNEL-MODE CODE.THIS OPTIONS IS NOT SET BY DEFAULT, WHICH MEANS TEST-SIGNED KERNEL -MODE DRIVERS WILL NOT LOAD BY DEFAULT ON 64-BIT VERSION OF WINDOWS VISTA AND LATER VERSIONS OF WINDOWS.

NOTE: FOR 64-BIT VERSION OF WINDOWS VISTA LATER VERSION OF WINDOWS, THE KERNEL-MODE CODE SIGNING POLICY REQUIRES THAT ALL KERNEL-MODE CODE HAVE A DIGITAL  SIGNATURE. HOWEVER,IN MOST CASES, AN UNSIGNED DRIVER CAN BE INSTALLED AND LOADED ON 32-BIT  VERSIONS OF WINDOWS VISTA AND LATER VERSION OF WINDOWS.

THE TEST SIGNING BOOT CONFIGURATION OPTION IS ENABLED OR DISANLED THROUGH THE BCDEdit COMMAND.TO ENABLE TEST-SIGNING,USE THE FOLLOWING BCDEdit  COMMAND:

Bcdedit.exe -set TESTSIGNING ON
TO DISABLE TEST-SIGNING, USE THE FOLLOWING BCDEdit COMMAND:
Bcdedit.exe -set TESTSIGNING OFF

No comments:

Post a Comment