某些Windows 10用户在尝试查看驱动程序包文件的签名属性时可能会遇到错误消息“主题中不存在签名”。^{(No signature was present in the subject)}在这篇文章中，我们简要说明了您可能会收到此消息的原因以及您可以尝试如何摆脱该特定包文件的消息。

如果被测计算机未连接到互联网，操作系统可能存在未知签名问题或驱动程序未签名问题^(Systems)。如果被测计算机连接到互联网，则在安装驱动程序时会自动下载新证书，不会有任何问题。有时，当被测计算机未连接到 Internet 时，CA 供应商也能够帮助解决问题。

阅读^(Read)：如何使用 sigverif 实用程序识别未签名的驱动程序。^{(How to identify unsigned drivers using sigverif utility.)}

主题中没有签名

当使用新的VeriSign发布的使用SHA256 算法^{(SHA256 algorithm)}的签名证书对目录文件 (.cat) 进行签名时，如果您打开签名的 cat 文件并查看签名，您可能会注意到主题消息中没有签名。^{(No signature was present in the subject)}

要解决此问题，您可以要求VeriSign免费提供使用SHA1哈希算法签名的替换证书。

或者，如果您想保留两个证书，您可以购买另一个SHA1证书并使用两个签名对文件进行签名，如下所示。请注意，只有 .sys 文件可以进行双重签名，因为它们是 PE 文件。

Signtool sign /fd sha256 /ac C:\MyCrossCert\Crosscert.cer /s my /n “MyCompany Inc. “ /ph /as /sha1 ZZ...ZZ C:\DriverDir\toaster.SYS

其中ZZ...ZZ是您用于辅助签名的证书的哈希值。添加/tr到时间戳签名。

附加说明^{(Additional note)}：从2016 年1 月 1日起， ^{(January 1)}Microsoft已弃用SHA1证书。所有 CA 供应商都必须使用^(SHA1)SHA256哈希算法颁发签名证书。

Windows在^(Windows)2016 年 1 月 1 日^{(January 2016)}之后停止接受没有时间戳的SHA1代码签名证书。

微软^(Microsoft)现在也表示，安装KB4579311后，Windows 10 可能会在安装一些第三方驱动程序时发出警告：

This issue occurs when an improperly formatted catalog file is identified during validation by Windows. Starting with this release, Windows will require the validity of DER encoded PKCS#7 content in catalog files. Catalogs files must be signed per section 11.6 of describing DER-encoding for SET OF members in X.690,”

希望这可以帮助！

相关帖子^{(Related post)}：Windows 需要数字签名的驱动程序。

No signature was present in the subject - Driver Signature Details

Some Windows 10 users might come across the error message “No signature was present in the subject” when trying to view the signature properties of a driver package file. In this post, we provide a brief description of why you may get this message and what you can try to get rid of the message for that particular package file.

Operating Systems may have unknown signing issues or driver not signed issues if the computer under test is not connected to the internet. If the computer under test is connected to the internet, then the new certificates are automatically downloaded when a driver is installed and there will not be any issues. Sometimes the CA vendors are also able to help out in resolving the issues when the computer under test is not connected to the internet.

Read: How to identify unsigned drivers using sigverif utility.

No signature was present in the subject

When a catalog file (.cat) is signed using a new VeriSign released signing certificate which uses the SHA256 algorithm, if you open the signed cat file and view signature, you may notice the No signature was present in the subject message.

To resolve the issue, you may ask VeriSign to provide a replacement certificate at no cost signed with the SHA1 hash algorithm.

Alternatively, you can buy another SHA1 certificate and sign the file with two signatures as shown below if you want to keep both certificates. Note that only .sys files can be dual signed because they are PE files.

Signtool sign /fd sha256 /ac C:\MyCrossCert\Crosscert.cer /s my /n “MyCompany Inc. “ /ph /as /sha1 ZZ...ZZ C:\DriverDir\toaster.SYS

Where ZZ…ZZ is the hash of the certificate you are using for the secondary signature. Add /tr to timestamp signing.

Additional note: Use of SHA1 certificate was deprecated by Microsoft starting from January 1, 2016. All CA vendors must issue signing certificates with the SHA256 hash algorithm.

Windows stopped accepting SHA1 code signing certificates without time stamps after 1 January 2016.

Microsoft has also stated now that after installing KB4579311, Windows 10 may warn you when installing some third-party drivers:

This issue occurs when an improperly formatted catalog file is identified during validation by Windows. Starting with this release, Windows will require the validity of DER encoded PKCS#7 content in catalog files. Catalogs files must be signed per section 11.6 of describing DER-encoding for SET OF members in X.690,”

Hope this helps!

Related post: Windows requires a digitally signed driver.

Related posts

• Windows无法验证数字签名（Code 52）

• 如何在Windows 10中禁用Automatic Driver Updates

• Display driver NVLDDMKM停止响应Windows 10

• Device在Windows 11/10上需要进一步的installation error

• Install Realtek HD Audio Driver Failure，Error OxC0000374上Windows 10

• HP 3D DriveGuard在意外滴剂后保护Hard Drive免受损坏

• MTP USB device驱动程序无法在Windows 10上安装

• Windows 11/10 Fix Generic PnP Monitor驱动程序问题

• 在哪里下载Windows 10的NVIDIA驱动程序

• 什么是Microsoft Device Association Root Enumerator？

• Troubleshoot Intel Graphics Drivers Windows 10上的问题

• 如何为Windows 10安装WiFi驱动程序

• Export and Backup Device Drivers在Windows 10中使用PowerShell

• Fix您需要一个WIA driver在Windows 11/10上使用此device error

• 已安装的驱动程序未验证此计算机

• Intel Driver & Support Assistant：下载，安装，更新Intel驱动程序

• 如何在Windows 10上禁用Driver Signature enforcement

• Turn关闭Memory Integrity设置如果Windows无法加载驱动程序

• 什么是tap-windows Adapter v9？我在哪里下载这个Driver？

• 此设备的驱动程序已被阻止启动（Code 48）