在windows10 LTSC下签名验证失败

[tpunix]

试了几个证书都不行:
. sig: {_VERIFY_FILE_SIGNATURE} 09:36:27.480
. sig: Key = DXVGRB.inf
. sig: FilePath = e:\driversoftware\drivers\sd30c\testsign\x64\DXVGRB.inf
. sig: Catalog = e:\driversoftware\drivers\sd30c\testsign\x64\DxVGrb.cat
! sig: Verifying file against specific (valid) catalog failed.
! sig: Error 0x800b0109: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
. sig: {_VERIFY_FILE_SIGNATURE exit(0x800b0109)} 09:36:27.501
. sig: {_VERIFY_FILE_SIGNATURE} 09:36:27.502
. sig: Key = DXVGRB.inf
. sig: FilePath = e:\driversoftware\drivers\sd30c\testsign\x64\DXVGRB.inf
. sig: Catalog = e:\driversoftware\drivers\sd30c\testsign\x64\DxVGrb.cat
. sig: Success: File is signed in Authenticode(tm) catalog.
. sig: Error 0xe0000242: The publisher of an Authenticode(tm) signed catalog has not yet been established as trusted.
. sig: {_VERIFY_FILE_SIGNATURE exit(0xe0000242)} 09:36:27.508

. sig: {_VERIFY_FILE_SIGNATURE} 09:36:27.676
. sig: Key = dxvgrb.inf
. sig: FilePath = C:\Windows\System32\DriverStore\Temp{b962a2d3-b281-4946-b7e5-dec358e5ddbe}\dxvgrb.inf
. sig: Catalog = C:\Windows\System32\DriverStore\Temp{b962a2d3-b281-4946-b7e5-dec358e5ddbe}\DxVGrb.cat
! sig: Verifying file against specific Authenticode(tm) catalog failed.
! sig: Error 0x80096005: The timestamp signature and/or certificate could not be verified or is malformed.

[Jemmy1228]

时间戳证书链默认是不收信任的，你需要自己添加到受信根证书里。

[tpunix]

已经添加了的。
用signtool 检查，也是失败（win7和win10下）。

[Jemmy1228]

那就是这签名有问题吧…
你把你签名的东西用附件发出来

[tpunix]

相关文件在这里. 原驱动在win10下装不上，cat里面的inf文件的hash值不对。所以想重新签名。
testsign.zip

[tpunix]

又做了些尝试，发现我在安装时间戳证书时，安装在当前用户下了。装在系统下面就好了。0x800b0109错误始终存在，但不影响驱动安装使用。