[wix-users] new Windows 10 version 1607 kernel mode device driver requirements - HOWTO implement in WIX conditionally?

David Watson dwatson at sdl.com
Tue Jun 13 02:07:54 PDT 2017

Do you support a wide variety of older operating systems?

I ask because I would have expected the EV certificates to work on most operating systems so you can just replace the old driver with the newly signed one. Then you don't need conditionals.

If you do want to do this you need component conditions on both sets of components, the OS can be determined with the VersionNT and WindowsBuild properties, but I am not sure if these are being populated correctly in windows 10, there used to be issues.



SDL PLC confidential, all rights reserved. If you are not the intended recipient of this mail SDL requests and requires that you delete it without acting upon or copying any of its contents, and we further request that you advise us.

SDL PLC is a public limited company registered in England and Wales. Registered number: 02675207.
Registered address: Globe House, Clivemont Road, Maidenhead, Berkshire SL6 7DY, UK.

-----Original Message-----
From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On Behalf Of Anthony LaMark
Sent: 12 June 2017 17:26
To: wix-users at lists.wixtoolset.org
Subject: [wix-users] new Windows 10 version 1607 kernel mode device driver requirements - HOWTO implement in WIX conditionally?


Since Windows 10, version 1607 requires kernel mode device drivers to be signed with an "Extended Validation Code Signing Certificate", I believe I need to modify our installer (using WIX 3.10) now to install our kernel mode device driver using a "conditional check" against the Windows Operating System version.  I read this <https://blogs.msdn.microsoft.com/windows_hardware_certification/2016/07/26/
driver-signing-changes-in-windows-10-version-1607/> Microsoft blog and it is still not clear to me whether I really need to do this or not but I am moving forward (preparing) as if I will.

The new logic for the WIX installer that I desire will be:

if (Windows 10, 1607 or greater) then

  install the device driver signed with the "Extended Validation Symantec Code Signing Certificate"


  install the device driver signed with our existing "Symantec Code Signing Certificate"

The wxs file currently is defined with:

         <Component Id='TheKernelModeDriver'

           <File Id=' TheKernelModeDriverSYS' Name='xxxxxx.sys' DiskId='1'
Source='\driver\secRMM.sys' KeyPath='yes' />

           <File Id=' TheKernelModeDriverINF' Name='xxxxxx.inf' DiskId='1'
Source='\driver\secRMM.inf' />

           <File Id=' TheKernelModeDriverCAT' Name='xxxxxx.cat' DiskId='1'
Source='\driver\secRMM.cat' />

           <difx:Driver AddRemovePrograms='no' DeleteFiles='yes'
ForceInstall='yes' Legacy='yes' PlugAndPlayPrompt='no' Sequence='1'/>


   <Feature Id="ProductFeatures"  Title="Binaries" Level="1">

     <ComponentRef Id='TheKernelModeDriver'  />


Looking at the documentation and web searching, I am not sure whether the conditional logic (if that is the solution/is possible for drivers) goes in the Component or Feature.

Also, I am looking for the WIX/msiexec property to allow me implement the conditional check above.

If this is not possible, I am going to have to build two different installers (.msi), one with the Extended Validation signed driver and one with the "non"Extended Validation driver (for older OS-es).

Looking at the Microsoft documentation page titled <https://msdn.microsoft.com/en-us/library/windows/desktop/aa370556(v=vs.85).
aspx> "Operating System Property Values" , I do not see values for
aspx> Windows
10 (and the versions such as 1607) or Server 2016.

Web searching results have mixed information about determining a Windows 10 OS let alone the version of 1607.

Does anyone have any advice on how to implement this in WIX?

Anthony LaMark

squadra technologies

http://webdefence.global.blackspider.com/urlwrap/?q=AXicY2Rm8FrCwHB9AQNDUU6lgUmSXnFRmV5uYmZOcn5eSVF-jl5yfi5Dmamze1BoloehoaW5iTFDSnliSXF-nkNxCkQ6o6SkwEpfv7y8XK-4sDQxpSixJDU5Iy8_Jz89M7UYrISBoXMKAwMAuu8kcA&Z <http://webdefence.global.blackspider.com/urlwrap/?q=AXicY2Rm8FrCwHB9AQNDUU6lgUmSXnFRmV5uYmZOcn5eSVF-jl5yfi5Dmamze1BoloehoaW5iTFDSnliSXF-nkNxCkQ6o6SkwEpfv7y8XK-4sDQxpSixJDU5Iy8_Jz89M7UYpESfgYGhcwoDAwDfuiSf&Z>


WiX Toolset Users Mailing List provided by FireGiant http://www.firegiant.com/

This message has been scanned for malware by Websense. www.websense.com

More information about the wix-users mailing list