Re: [win-pv-devel] Signed Windows PV Driver

[ÃliÃs TamÃs <et@xxxxxxx>]

Hi.

> So if I have a self signed certificate and import it to Windows's
> Trusted Root CA in the certificate store, I can properly install self
> compiled PV drivers signed by that certificate to that Windows guest. 
> Is my understanding correct?
This should be the way, in my understandig too, but unfortunately after
installing the pfx certificates to my windows10 local machine cert
store, the drivers were still not working.

I had to stay with TESTSIGNING to make it work. I wonder what the
problem could be.

> 
> I saw a lot mails in this mailing list discussing failure of PV drivers
> working under Windows 10.  Does it mean the PV drivers are not yet
> stable enough to work under Windows 10?
> 
PV drivers are working well, I'm using it on several Windows 10
machines. I just posted a message about how to install them,

The only issue is now that they work only when TESTSIGNING is on.

> Regards
> Terry
> 
> On Thu, Oct 29, 2015 at 4:52 PM, Ben Chalmers <ben.chalmers@xxxxxxxxxx
> <mailto:ben.chalmers@xxxxxxxxxx>> wrote:
> 
>     Those statements are correct.
> 
>     __ __
> 
>     The drivers provided by Citrix XenServer are from the same code base
>     as the Xen project PV drivers â but are currently older (and taken
>     from a point before the drivers were handed over from the XenServer
>     project to the Xen project).  Those drivers have BSD licensed source
>     code (as do the Xen project drivers) so there shouldnât be a
>     conflict (but donât trust me â Iâm not a lawyer and not speaking for
>     Citrix here)
> 
>     __ __
> 
>     I would expect the Citrix drivers to work with Xen (but no promises,
>     YMMV!).  And going forwards (as Citrix PV drivers are increasingly
>     built from Xen project rather then the XenServer project code) this
>     will be more and more likely.
> 
>     __ __
> 
>     (incidentally, if you have a code signing cert with a chain of trust
>     back to a root provider, you can sign any drivers you build â and
>     then install those certificates into Windows â avoiding worrying
>     about needing to turn test signing on.  Not sure if that helps)
> 
>     __ __
> 
>     Ben Chalmers
> 
>     __ __
> 
>     __ __
> 
> 
>     *From: *Xen Newbie
>     *Sent: *29 October 2015 05:55
>     *To: *Xen Windows PV Drivers Development Mailing List
>     *Subject: *[win-pv-devel] Signed Windows PV Driver
> 
>     __ __
> 
>     __ __
> 
>     I've asked the questions at the Xen users mailing list but nobody
>     has interest to offer me a help.  If the questions are too basic and
>     should not be raised in this devel mailing list, please forgive me.____
> 
>     __ __
> 
>     I want to install a signed PV drivers in my HVM windows guest since
>     I learnt from the web that a test signed driver may lead to
>     conflicts with some Windows applications.____
> 
>     __ __
> 
>     I studied a lot from the Xen project pages and Xen mailing list for
>     users and pv driver development. I am confused since some of the
>     information seems to be out-dated. ____
> 
>     __ __
> 
>     I consolidated what I learnt so far and would like to seek for help
>     to clarify the following conecpts before I make my next move:____
> 
>     __ __
> 
>     1) Those signed Windows drivers resided on univention seemed to be
>     already out-dated.____
> 
>     2) Those PV drivers provided on
>     http://www.xenproject.org/developers/teams/windows-pv-drivers.html
>     requires my own compilation. The drivers compiled are test signed
>     and requires setting the Windows to test mode.____
> 
>     3) The PV drivers provided by Citrix XenServer seems to work also
>     with Xen Hypervisor but I'm not sure whether there is any license
>     conflict.____
> 
>     4) There are Microsoft signed PV drivers provided by Oracle VM but I
>     need to use Oracle VM as my Domain 0 in order to use them.____
> 
>     __ __
> 
>     Can anyone confirm my understanding as fore-mentioned?____
> 
>     __ __
> 
>     I want to make a PC as a HTPC/NAS combo with HTPC part played by a
>     Windows 7 (Windows 10 preferred if feasible) PV HVM guest.____
> 
>     __ __
> 
>     I'm now stuck at the planning stage of Windows PV drivers. I don't
>     want to compile anything and set the Windows to test mode.____
> 
>     __ __
> 
>     So can I just download the PV drivers from Citrix and installed to
>     the guest? Will it work with my Xen 4.5/4.6 Hypervisor with Ubuntu
>     15.04 Domain 0?____
> 
>     __ __
> 
>     I'll be very grateful if anyone can help me.____
> 
>     __ __
> 
>     Regards____
> 
>     Lok____
> 
>     __ __
> 
>     __ __
> 
> 
> 
> 
> _______________________________________________
> win-pv-devel mailing list
> win-pv-devel@xxxxxxxxxxxxxxxxxxxx
> http://lists.xenproject.org/cgi-bin/mailman/listinfo/win-pv-devel
> 

-- 


ÃliÃs TamÃs
Thomas Elias

ETIT[nwpro] KFT, ÃgyvezetÅ-HÃlÃzatbiztonsÃgi specialista
ETIT[nwpro] Ltd, General Manager-Network security specialist

Tel. HU: +36/30-497-1626
Tel. DE: +49/160-651-8723
OpenPGP pubkey: http://etit.hu/doc/et-pub.asc

Okleveles mÃrnÃk-informatikus (MSC)
Master of Science in Information Technology (MSC)

Kapcsolat: http://etit.hu/index.php/hu/kapcsolat
Jogi nyilatkozat: http://etit.hu/disclaimer-email-hu.txt
Contact: http://etit.hu/index.php/en/contact
Disclaimer: http://etit.hu/disclaimer-email-en.txt

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
win-pv-devel mailing list
win-pv-devel@xxxxxxxxxxxxxxxxxxxx
http://lists.xenproject.org/cgi-bin/mailman/listinfo/win-pv-devel