Signing Canon Custom Print Drivers for Server 2012 and Windows 8/10


I'm working on driver signing for Windows as we've modified the default Canon print driver using their tool.

Unfortunately, this removes driver signing and will not work in Server 2012 nor in Windows 8/10.  

I need some assistance finding out the exact process for signing an INF (With a supporting Cab file) for installation with Server 2012 and Windows 8/10.  

This is the only helpful article I could find:, but I'm worried this won't work in Windows 10.  Am I able to use this tutorial using a GoDaddy Driver Signing Certificate?  I also read they are phasing out SHA-1 and going SHA-2.  Am I able to just replace the SHA-1 with SHA-2 in the tutorial?  I want to make sure I don't purchase something I don't need and be out $2,000 (For 5 years and two certs).

The other walkthroughs are too convoluted to find out exactly what needs to be done as it's not a new driver that I'm writing, it's just a modified version of the previously signed driver.  That and the driver signing points to all drivers, not print drivers specifically.

Apparently, for Windows 10, they are changing up how drivers work as shown here:

Does this apply to print drivers as well?  I need to ensure that the process I'll be pursuing will work in future OS installations.


Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

David Johnson, CD, MVPOwnerCommented:
printer drivers don't run in kernel mode but user mode, the biggest change was in kernel mode drivers
with server 2012R2 I use a microsoft authenticode code signing cert to sign network drivers.
If you setup a certificate authority in your forest you should have no problem signing anything you want. It shouldn't cost anything but a little time.
RMChelpAuthor Commented:
This is for a customer that doesn't have a certificate authority.  I am going to go with Canon to create the signing.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
RMChelpAuthor Commented:
None of the answers were helpful in resolving my request as a generic answer wasn't what was needed.  Also, as this is for a customer, the certificate authority will not work.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.