Project: enforce SHA256 digest in signing

Signed-off-by: Bingxing Wang <[email protected]>
imbushuo · Oct 2, 2021 · 3e03f61 · 3e03f61
1 parent 1297a46
commit 3e03f61
Show file tree

Hide file tree

Showing 5 changed files with 144 additions and 61 deletions.
diff --git a/AmtPtpDriver.sln b/AmtPtpDriver.sln
@@ -26,21 +26,17 @@ Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "AmtPtpHidFilter", "src\AmtP
 EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
-		Debug|ARM = Debug|ARM
 		Debug|ARM64 = Debug|ARM64
 		Debug|x64 = Debug|x64
 		Debug|x86 = Debug|x86
-		Release|ARM = Release|ARM
 		Release|ARM64 = Release|ARM64
 		Release|x64 = Release|x64
 		Release|x86 = Release|x86
-		ReleaseSigned|ARM = ReleaseSigned|ARM
 		ReleaseSigned|ARM64 = ReleaseSigned|ARM64
 		ReleaseSigned|x64 = ReleaseSigned|x64
 		ReleaseSigned|x86 = ReleaseSigned|x86
 	EndGlobalSection
 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
-		{87EFA31B-25EB-4944-A30A-300171BFFF57}.Debug|ARM.ActiveCfg = Debug|Win32
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.Debug|ARM64.ActiveCfg = Debug|ARM64
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.Debug|ARM64.Build.0 = Debug|ARM64
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.Debug|ARM64.Deploy.0 = Debug|ARM64
@@ -50,7 +46,6 @@ Global
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.Debug|x86.ActiveCfg = Debug|Win32
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.Debug|x86.Build.0 = Debug|Win32
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.Debug|x86.Deploy.0 = Debug|Win32
-		{87EFA31B-25EB-4944-A30A-300171BFFF57}.Release|ARM.ActiveCfg = Release|Win32
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.Release|ARM64.ActiveCfg = Release|ARM64
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.Release|ARM64.Build.0 = Release|ARM64
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.Release|ARM64.Deploy.0 = Release|ARM64
@@ -60,7 +55,6 @@ Global
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.Release|x86.ActiveCfg = Release|Win32
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.Release|x86.Build.0 = Release|Win32
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.Release|x86.Deploy.0 = Release|Win32
-		{87EFA31B-25EB-4944-A30A-300171BFFF57}.ReleaseSigned|ARM.ActiveCfg = ReleaseSigned|Win32
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.ReleaseSigned|ARM64.ActiveCfg = ReleaseSigned|ARM64
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.ReleaseSigned|ARM64.Build.0 = ReleaseSigned|ARM64
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.ReleaseSigned|ARM64.Deploy.0 = ReleaseSigned|ARM64
@@ -70,7 +64,6 @@ Global
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.ReleaseSigned|x86.ActiveCfg = ReleaseSigned|Win32
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.ReleaseSigned|x86.Build.0 = ReleaseSigned|Win32
 		{87EFA31B-25EB-4944-A30A-300171BFFF57}.ReleaseSigned|x86.Deploy.0 = ReleaseSigned|Win32
-		{FC08B706-5661-47FA-A840-053B06125750}.Debug|ARM.ActiveCfg = Debug|Win32
 		{FC08B706-5661-47FA-A840-053B06125750}.Debug|ARM64.ActiveCfg = Debug|ARM64
 		{FC08B706-5661-47FA-A840-053B06125750}.Debug|ARM64.Build.0 = Debug|ARM64
 		{FC08B706-5661-47FA-A840-053B06125750}.Debug|ARM64.Deploy.0 = Debug|ARM64
@@ -80,7 +73,6 @@ Global
 		{FC08B706-5661-47FA-A840-053B06125750}.Debug|x86.ActiveCfg = Debug|Win32
 		{FC08B706-5661-47FA-A840-053B06125750}.Debug|x86.Build.0 = Debug|Win32
 		{FC08B706-5661-47FA-A840-053B06125750}.Debug|x86.Deploy.0 = Debug|Win32
-		{FC08B706-5661-47FA-A840-053B06125750}.Release|ARM.ActiveCfg = Release|Win32
 		{FC08B706-5661-47FA-A840-053B06125750}.Release|ARM64.ActiveCfg = Release|ARM64
 		{FC08B706-5661-47FA-A840-053B06125750}.Release|ARM64.Build.0 = Release|ARM64
 		{FC08B706-5661-47FA-A840-053B06125750}.Release|ARM64.Deploy.0 = Release|ARM64
@@ -90,7 +82,6 @@ Global
 		{FC08B706-5661-47FA-A840-053B06125750}.Release|x86.ActiveCfg = Release|Win32
 		{FC08B706-5661-47FA-A840-053B06125750}.Release|x86.Build.0 = Release|Win32
 		{FC08B706-5661-47FA-A840-053B06125750}.Release|x86.Deploy.0 = Release|Win32
-		{FC08B706-5661-47FA-A840-053B06125750}.ReleaseSigned|ARM.ActiveCfg = ReleaseSigned|Win32
 		{FC08B706-5661-47FA-A840-053B06125750}.ReleaseSigned|ARM64.ActiveCfg = ReleaseSigned|ARM64
 		{FC08B706-5661-47FA-A840-053B06125750}.ReleaseSigned|ARM64.Build.0 = ReleaseSigned|ARM64
 		{FC08B706-5661-47FA-A840-053B06125750}.ReleaseSigned|ARM64.Deploy.0 = ReleaseSigned|ARM64
@@ -100,7 +91,6 @@ Global
 		{FC08B706-5661-47FA-A840-053B06125750}.ReleaseSigned|x86.ActiveCfg = ReleaseSigned|Win32
 		{FC08B706-5661-47FA-A840-053B06125750}.ReleaseSigned|x86.Build.0 = ReleaseSigned|Win32
 		{FC08B706-5661-47FA-A840-053B06125750}.ReleaseSigned|x86.Deploy.0 = ReleaseSigned|Win32
-		{AB3E45E7-C524-47C1-9677-728BA2A19344}.Debug|ARM.ActiveCfg = Debug|Win32
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.Debug|ARM64.ActiveCfg = Debug|ARM64
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.Debug|ARM64.Build.0 = Debug|ARM64
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.Debug|ARM64.Deploy.0 = Debug|ARM64
@@ -110,7 +100,6 @@ Global
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.Debug|x86.ActiveCfg = Debug|Win32
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.Debug|x86.Build.0 = Debug|Win32
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.Debug|x86.Deploy.0 = Debug|Win32
-		{AB3E45E7-C524-47C1-9677-728BA2A19344}.Release|ARM.ActiveCfg = Release|Win32
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.Release|ARM64.ActiveCfg = Release|ARM64
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.Release|ARM64.Build.0 = Release|ARM64
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.Release|ARM64.Deploy.0 = Release|ARM64
@@ -120,7 +109,6 @@ Global
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.Release|x86.ActiveCfg = Release|Win32
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.Release|x86.Build.0 = Release|Win32
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.Release|x86.Deploy.0 = Release|Win32
-		{AB3E45E7-C524-47C1-9677-728BA2A19344}.ReleaseSigned|ARM.ActiveCfg = ReleaseSigned|Win32
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.ReleaseSigned|ARM64.ActiveCfg = ReleaseSigned|ARM64
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.ReleaseSigned|ARM64.Build.0 = ReleaseSigned|ARM64
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.ReleaseSigned|ARM64.Deploy.0 = ReleaseSigned|ARM64
@@ -130,7 +118,6 @@ Global
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.ReleaseSigned|x86.ActiveCfg = ReleaseSigned|Win32
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.ReleaseSigned|x86.Build.0 = ReleaseSigned|Win32
 		{AB3E45E7-C524-47C1-9677-728BA2A19344}.ReleaseSigned|x86.Deploy.0 = ReleaseSigned|Win32
-		{7AB0A246-AA1C-433B-9E16-88956C51A565}.Debug|ARM.ActiveCfg = Debug|Win32
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.Debug|ARM64.ActiveCfg = Debug|ARM64
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.Debug|ARM64.Build.0 = Debug|ARM64
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.Debug|ARM64.Deploy.0 = Debug|ARM64
@@ -140,7 +127,6 @@ Global
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.Debug|x86.ActiveCfg = Debug|Win32
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.Debug|x86.Build.0 = Debug|Win32
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.Debug|x86.Deploy.0 = Debug|Win32
-		{7AB0A246-AA1C-433B-9E16-88956C51A565}.Release|ARM.ActiveCfg = Release|Win32
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.Release|ARM64.ActiveCfg = Release|ARM64
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.Release|ARM64.Build.0 = Release|ARM64
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.Release|ARM64.Deploy.0 = Release|ARM64
@@ -150,7 +136,6 @@ Global
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.Release|x86.ActiveCfg = Release|Win32
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.Release|x86.Build.0 = Release|Win32
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.Release|x86.Deploy.0 = Release|Win32
-		{7AB0A246-AA1C-433B-9E16-88956C51A565}.ReleaseSigned|ARM.ActiveCfg = ReleaseSigned|Win32
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.ReleaseSigned|ARM64.ActiveCfg = ReleaseSigned|ARM64
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.ReleaseSigned|ARM64.Build.0 = ReleaseSigned|ARM64
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.ReleaseSigned|ARM64.Deploy.0 = ReleaseSigned|ARM64
@@ -160,9 +145,6 @@ Global
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.ReleaseSigned|x86.ActiveCfg = ReleaseSigned|Win32
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.ReleaseSigned|x86.Build.0 = ReleaseSigned|Win32
 		{7AB0A246-AA1C-433B-9E16-88956C51A565}.ReleaseSigned|x86.Deploy.0 = ReleaseSigned|Win32
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Debug|ARM.ActiveCfg = Debug|ARM
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Debug|ARM.Build.0 = Debug|ARM
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Debug|ARM.Deploy.0 = Debug|ARM
 		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Debug|ARM64.ActiveCfg = Debug|ARM64
 		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Debug|ARM64.Build.0 = Debug|ARM64
 		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Debug|ARM64.Deploy.0 = Debug|ARM64
@@ -172,9 +154,6 @@ Global
 		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Debug|x86.ActiveCfg = Debug|Win32
 		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Debug|x86.Build.0 = Debug|Win32
 		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Debug|x86.Deploy.0 = Debug|Win32
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Release|ARM.ActiveCfg = Release|ARM
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Release|ARM.Build.0 = Release|ARM
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Release|ARM.Deploy.0 = Release|ARM
 		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Release|ARM64.ActiveCfg = Release|ARM64
 		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Release|ARM64.Build.0 = Release|ARM64
 		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Release|ARM64.Deploy.0 = Release|ARM64
@@ -184,18 +163,15 @@ Global
 		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Release|x86.ActiveCfg = Release|Win32
 		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Release|x86.Build.0 = Release|Win32
 		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.Release|x86.Deploy.0 = Release|Win32
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|ARM.ActiveCfg = Release|ARM
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|ARM.Build.0 = Release|ARM
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|ARM.Deploy.0 = Release|ARM
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|ARM64.ActiveCfg = Release|ARM64
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|ARM64.Build.0 = Release|ARM64
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|ARM64.Deploy.0 = Release|ARM64
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|x64.ActiveCfg = Release|x64
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|x64.Build.0 = Release|x64
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|x64.Deploy.0 = Release|x64
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|x86.ActiveCfg = Release|Win32
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|x86.Build.0 = Release|Win32
-		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|x86.Deploy.0 = Release|Win32
+		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|ARM64.ActiveCfg = ReleaseSigned|ARM64
+		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|ARM64.Build.0 = ReleaseSigned|ARM64
+		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|ARM64.Deploy.0 = ReleaseSigned|ARM64
+		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|x64.ActiveCfg = ReleaseSigned|x64
+		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|x64.Build.0 = ReleaseSigned|x64
+		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|x64.Deploy.0 = ReleaseSigned|x64
+		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|x86.ActiveCfg = ReleaseSigned|Win32
+		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|x86.Build.0 = ReleaseSigned|Win32
+		{EE63C42B-F401-4F55-ADBB-14C16BD3B18C}.ReleaseSigned|x86.Deploy.0 = ReleaseSigned|Win32
 	EndGlobalSection
 	GlobalSection(SolutionProperties) = preSolution
 		HideSolutionNode = FALSE

diff --git a/src/AmtPtpDeviceSpiKm/AmtPtpDeviceSpiKm.vcxproj b/src/AmtPtpDeviceSpiKm/AmtPtpDeviceSpiKm.vcxproj
@@ -188,12 +188,14 @@
     <OutDir>$(SolutionDir)build\$(ProjectName)\$(Platform)\$(ConfigurationName)\</OutDir>
     <IntDir>$(SolutionDir)intermediate\$(ProjectName)\$(Platform)\$(ConfigurationName)\</IntDir>
     <IncludePath>$(SolutionDir)intermediate\$(ProjectName)\$(Platform)\$(ConfigurationName)\;$(IncludePath)</IncludePath>
+    <TimeStampServer>http://timestamp.digicert.com</TimeStampServer>
   </PropertyGroup>
   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
     <DebuggerFlavor>DbgengKernelDebugger</DebuggerFlavor>
     <OutDir>$(SolutionDir)build\$(ProjectName)\$(Platform)\$(ConfigurationName)\</OutDir>
     <IntDir>$(SolutionDir)intermediate\$(ProjectName)\$(Platform)\$(ConfigurationName)\</IntDir>
     <IncludePath>$(SolutionDir)intermediate\$(ProjectName)\$(Platform)\$(ConfigurationName)\;$(IncludePath)</IncludePath>
+    <TimeStampServer>http://timestamp.digicert.com</TimeStampServer>
   </PropertyGroup>
   <!-- For release signed config on Azure pipeline, CI pipeline don't sign it. We do that locally -->
   <PropertyGroup Condition="'$(Configuration)'=='ReleaseSigned'">
@@ -213,12 +215,14 @@
     <OutDir>$(SolutionDir)build\$(ProjectName)\$(Platform)\$(ConfigurationName)\</OutDir>
     <IntDir>$(SolutionDir)intermediate\$(ProjectName)\$(Platform)\$(ConfigurationName)\</IntDir>
     <IncludePath>$(SolutionDir)intermediate\$(ProjectName)\$(Platform)\$(ConfigurationName)\;$(IncludePath)</IncludePath>
+    <TimeStampServer>http://timestamp.digicert.com</TimeStampServer>
   </PropertyGroup>
   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
     <DebuggerFlavor>DbgengKernelDebugger</DebuggerFlavor>
     <OutDir>$(SolutionDir)build\$(ProjectName)\$(Platform)\$(ConfigurationName)\</OutDir>
     <IntDir>$(SolutionDir)intermediate\$(ProjectName)\$(Platform)\$(ConfigurationName)\</IntDir>
     <IncludePath>$(SolutionDir)intermediate\$(ProjectName)\$(Platform)\$(ConfigurationName)\;$(IncludePath)</IncludePath>
+    <TimeStampServer>http://timestamp.digicert.com</TimeStampServer>
   </PropertyGroup>
   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='ReleaseSigned|x64'">
     <DebuggerFlavor>DbgengKernelDebugger</DebuggerFlavor>
@@ -231,12 +235,14 @@
     <OutDir>$(SolutionDir)build\$(ProjectName)\$(Platform)\$(ConfigurationName)\</OutDir>
     <IntDir>$(SolutionDir)intermediate\$(ProjectName)\$(Platform)\$(ConfigurationName)\</IntDir>
     <IncludePath>$(SolutionDir)intermediate\$(ProjectName)\$(Platform)\$(ConfigurationName)\;$(IncludePath)</IncludePath>
+    <TimeStampServer>http://timestamp.digicert.com</TimeStampServer>
   </PropertyGroup>
   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|ARM64'">
     <DebuggerFlavor>DbgengKernelDebugger</DebuggerFlavor>
     <OutDir>$(SolutionDir)build\$(ProjectName)\$(Platform)\$(ConfigurationName)\</OutDir>
     <IntDir>$(SolutionDir)intermediate\$(ProjectName)\$(Platform)\$(ConfigurationName)\</IntDir>
     <IncludePath>$(SolutionDir)intermediate\$(ProjectName)\$(Platform)\$(ConfigurationName)\;$(IncludePath)</IncludePath>
+    <TimeStampServer>http://timestamp.digicert.com</TimeStampServer>
   </PropertyGroup>
   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='ReleaseSigned|ARM64'">
     <DebuggerFlavor>DbgengKernelDebugger</DebuggerFlavor>
@@ -252,6 +258,9 @@
       <WppKernelMode>true</WppKernelMode>
       <DisableSpecificWarnings>4214</DisableSpecificWarnings>
     </ClCompile>
+    <DriverSign>
+      <FileDigestAlgorithm>sha256</FileDigestAlgorithm>
+    </DriverSign>
   </ItemDefinitionGroup>
   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
     <ClCompile>
@@ -261,6 +270,9 @@
       <WppKernelMode>true</WppKernelMode>
       <DisableSpecificWarnings>4214</DisableSpecificWarnings>
     </ClCompile>
+    <DriverSign>
+      <FileDigestAlgorithm>sha256</FileDigestAlgorithm>
+    </DriverSign>
   </ItemDefinitionGroup>
   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='ReleaseSigned|Win32'">
     <ClCompile>
@@ -282,6 +294,9 @@
       <WppKernelMode>true</WppKernelMode>
       <DisableSpecificWarnings>4214</DisableSpecificWarnings>
     </ClCompile>
+    <DriverSign>
+      <FileDigestAlgorithm>sha256</FileDigestAlgorithm>
+    </DriverSign>
   </ItemDefinitionGroup>
   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
     <ClCompile>
@@ -291,6 +306,9 @@
       <WppKernelMode>true</WppKernelMode>
       <DisableSpecificWarnings>4214</DisableSpecificWarnings>
     </ClCompile>
+    <DriverSign>
+      <FileDigestAlgorithm>sha256</FileDigestAlgorithm>
+    </DriverSign>
   </ItemDefinitionGroup>
   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='ReleaseSigned|x64'">
     <ClCompile>