Succeed in running without TESTSIGNING mode

[fyachan]

Note: It may take quite a lot of time and effort if you are not very familiar with Windows and your BIOS.

To load self-signed drivers without TestSigning, you have to enable Custom Kernel Signers(CKS) in Windows. These 2 tutorials provide the steps and utilities to enable it.

• HyperSine / Windows10-CustomKernelSigners
• valinet / ssde

The whole process is:

1. Enter TESTSIGNING mode. Install WinAppleKey and make sure it works. (Since CKS require Secure Boot, you cannot install WinAppleKey afterwards.)
2. Turn off TESTSIGNING mode and reboot.
3. Follow the tutorials above to enable CKS. (Use the ssde utilities if your Windows is newer than 1809.) Make sure running sc start ssde returns no error in the final step.
4. Sign WinAppleKey.sys with the following command

   signtool sign /fd sha256 /a /ac .\localhost-root-ca.der /f .\localhost-km.pfx /p <password> /tr http://sha256timestamp.ws.symantec.com/sha256/timestamp C:\Drivers\WinAppleKey\WinAppleKey.sys
   

5. Reboot.
6. Reconnect the keyboard and now WinAppleKey should work fine again.

My environment:

• WinAppleKey 1.0.4
• Windows 10 build 19044
• Gigabyte B450i

Finally, thank you @samartzidis a lot for your fantastic driver!! It makes the Apple keyboard work so perfectly on windows.

[karlamba]

Hi Guys, I'm trying to sign this driver but the mentioned signtool comando doesn't work... I've modified it a little bit when I've googled for some answers but at the end this solution doesn't work because I cannot start the ssde service. Can someone help me out please with this? Maybe this guide is not up-to-date or something else I'm doing wrong?