How can I get my printer driver to install on Windows 7 again

Question

For some years we used a Comodo SHA-1 code signing certificate to sign the .cat file of our Windows printer driver. The built signed driver installed fine on XP up to Windows 10. On systems that have never seen the driver before we get the expected warning dialog asking if the user trusts us, the author of the driver. So everything's been fine up til now.

Unfortunately, that certificate just expired, and since SHA-1 certificates are deprecated, the supplied replacement certificate is SHA-2.

The only thing that has changed in our build is the certificate. The build still produces a signed driver, and that driver behaves the same as before, ie absolutely fine, on Windows 8 and up . But on Windows 7, even after installing the Windows patch to make it understand SHA-2, at driver-install time we now get the scary red warning dialog saying the driver is unsigned.

My question is - is there anything I can do get the driver to install without the scary warning on Windows 7 with the Windows SHA-2 patch installed?

Answer 1

一旦我将 comodo 提供的交叉证书添加到构建机器上的中间证书颁发机构存储中，我就能够重建驱动程序，使其安装在 Win7x64 上，而不会出现任何可怕的红色警告。