ssde
ssde copied to clipboard
valinet
SSDE is a collection of utilities that help in having Windows load your custom signed kernel drivers when Secure Boot is on and you own the system's platform key, instead of using test mode.
As of at least Windows 11 23H2, it's possible to install the ConfigCI powershell module without needing Education/Enterprise editions: `gci $Env:SystemRoot\servicing\Packages\*ConfigCI*.mum | % { dism /online /norestart /add-package:"$_" }` This...
Hi, I've tested the method, and it worked fine when I generated the keys directly using this [guide](https://github.com/HyperSine/Windows10-CustomKernelSigners/blob/master/asset/build-your-own-pki.md). Then I tried to export all the related keys to a new...
Why not SiPolicy.p7b to xml, then edit sign in xml,last use https://aka.ms/refreshpolicy refresh it. https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/design/microsoft-recommended-driver-block-rules
Hello valinet! Can you please implement Github Actions to build binaries?
**IMPORTANT** This laptop loses the PK **EVERY** time one changes any setting in the UEFI program (which is really annoying). A quick fix is this: 1. After changing the setting...
I had a lot of headache with ssde_enable.exe and I came up with a much more convenient solution. 0. Setup everything, Own PK & Co, Policy, etc... 1. Reboot to...
I had to disable [Code Integrity](https://learn.microsoft.com/en-us/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity) via the following command: ```powershell Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" -Name "Enabled" -Value 0 ``` Before that, it logged: ``` 3004 Windows is unable to verify...
