Configure driver signing and verification
mainThe build command manages driver signing via the --sign-mode flag.
Signing Modes:
test(default): Signs with a test certificate. The tool looks for a certificate namedWDRLocalTestCertin theWDRTestCertStore. If not found, it automatically generates, adds, and uses a self-signed certificate.off: Skips signing. Use this if you intend to use a separate toolchain for signing.
Signature Verification:
If you use the --verify-signature flag, the tool verifies the signature after the signing process.
Important Requirements for Verification:
- You must manually add a copy of the signing certificate to the
Trusted Root Certification Authoritiesstore. The tool will not do this automatically for security reasons. - You cannot combine
--verify-signaturewith--sign-mode off. This will result in an error.