WHQL catalog file- by microsoft

最新推荐文章于 2023-12-14 17:06:32 发布

jw212

最新推荐文章于 2023-12-14 17:06:32 发布

阅读量1k

点赞数

文章标签： microsoft file system windows each

本文链接：https://blog.csdn.net/jw212/article/details/5790167

版权

本文介绍了用于数字签名的已签名目录文件（.cat）在驱动程序包中的使用方式。这些文件确保了软件的真实性和完整性，并详细说明了如何在不同操作系统上进行验证，以及在修改驱动程序或硬件更改后重新签名的要求。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Signed catalog files (.cat) are used as digital signatures for driver packages. A catalog file is a collection of tags. Each tag corresponds to a file installed by the driver package. On Windows® 2000 and later, and on Windows Millennium Edition, each tag is a cryptographic checksum value. On Windows 98, each tag is a text file name. Regardless of the intended operating system, cryptographic technology is used to digitally sign the catalog file.

The CatalogFile entry in the INF Version section of the driver's INF file specifies the name of the catalog file. For driver packages that receive a WHQL digital signature, WHQL reads this entry and generates a signed catalog file with the specified name. For driver packages that have a vendor-supplied Authenticode signature, the vendor generates a signed catalog file for the package.

At driver installation, the system uses the CatalogFile entry to identify and validate the catalog file. The system copies the catalog file to the %System%/CatRoot directory, and it copies the INF file to the %System%/Inf directory.

Changing or replacing any of the files in the driver package, including the INF file or the catalog file itself, invalidates the digital signature. Even a single-byte change, for example, to correct a misspelling, invalidates the signature. If the digital signature is broken, you must either resubmit the package to WHQL for a new signature or generate a new Authenticode signature for the package.

Similarly, changes to the device hardware or firmware require a revised device ID value, so that the system can detect the updated device and install the correct driver. Because the revised device ID value must appear in the INF file, you must either resubmit the package to WHQL for a new signature or generate a new Authenticode signature for the package. You must do this even if the binaries do not change.

As a general rule, there should be one catalog file for each INF file in a driver package. If the driver package installs the same binaries on both Windows 98/Me and Windows 2000 and later platforms, the INF file can contain a single, undecorated CatalogFile directive. However, if the package installs different binaries, the INF file should contain decorated CatalogFile directives. For more information about the CatalogFile directive, see the INF Version Section.

If you have more than one driver package, you should create a separate catalog file for each package and give each catalog file a unique name. Two unrelated driver packages cannot share a single catalog file. A single driver package that serves multiple devices requires only one catalog file.