Signature Score Constants

  • Article

The system-defined SIGNERSCORE_Xxx constants include the signature score for each signature type. These constants can be used to extract the signature score from a driver rank and to compare signature scores. These constants also include a signature indicator that Windows uses internally to differentiate between signature types. However, the signature-type indicator does not affect the rank of a driver.

Where a driver rank is formatted as 0xSSGGTHHH, the signature score is the value of 0xSS000000.

To extract only the signature score from a driver rank or a SIGNERSCORE_Xxx constant, perform a bitwise AND between SIGNERSCORE_MASK and the driver rank or the constant.

To extract the signature indicator from a SIGNERSCORE_Xxx constant, perform a bitwise AND between the constant and the bitwise complement of SIGNATURE_MASK.

The SIGNERSCORE_Xxx constants, as defined in Setupapi.h, are as follows:

  • SIGNERSCORE_UNKNOWN
    A driver rank greater than or equal to this signature score indicates that the signing state of the driver is unknown.

  • SIGNERSCORE_W9X_SUSPECT
    A driver rank greater than or equal to this signature score and less than SIGNERSCORE_UNSIGNED indicates that a driver is unsigned and that the driver is not installed by an INF DDInstall section that has an .nt platform extension.

    For more information about the .nt extension, see Creating INF Files for Multiple Platforms and Operating Systems.

  • SIGNERSCORE_UNSIGNED
    A driver rank greater than or equal to this signature score and less than SIGNERSCORE_W9X_SUSPECT indicates that a driver is unsigned, but that the driver is installed by an INF DDInstall section that has an .nt platform extension.

  • SIGNERSCORE_AUTHENTICODE
    A driver rank that is greater than or equal to this signature score and less than SIGNERSCORE_UNSIGNED indicates that a driver has one of the following:

  • SIGNERSCORE_WHQL
    This constant includes the signature score that is added to a driver rank for all Microsoft signature types. It also indicates that the driver has a WHQL signature equal to or later than the version that is specified by the LowerLogoVersion value for the device setup class of the driver. To extract only the corresponding signature score from this constant, perform a bitwise AND between this constant and SIGNERSCORE_MASK.

  • SIGNERSCORE_UNCLASSIFIED
    This constant includes the signature score that is added to a driver rank for all Microsoft signature types. It also indicates that a signature can be any of the Microsoft signature types. To extract only the corresponding signature score from this constant, perform a bitwise AND between this constant and SIGNERSCORE_MASK.

  • SIGNERSCORE_INBOX
    This constant includes the signature score that is added to a driver rank for all Microsoft signature types. It also indicates that the driver is an inbox driver. To extract only the corresponding signature score from this constant, perform a bitwise AND between this constant and SIGNERSCORE_MASK.

  • SIGNERSCORE_LOGO_STANDARD
    This constant includes the signature score that is added to a driver rank for all Microsoft signature types. It also indicates that the driver has a standard WHQL signature. To extract only the corresponding signature score from this constant, perform a bitwise AND between this constant and SIGNERSCORE_MASK.

  • SIGNERSCORE_LOGO_PREMIUM
    This constant includes the signature score that is added to a driver rank for all Microsoft signature types. It also indicates that the driver has a premium WHQL signature. To extract only the corresponding signature score from this constant, perform a bitwise AND between this constant and SIGNERSCORE_MASK.

  • SIGNERSCORE_MASK
    This bitmask can be used to extract the signature score from a driver rank and from the other SIGNERSCORE_Xxx constants. To extract only the signature score from a driver rank or constant, perform a bitwise AND between SIGNERSCORE_MASK and the driver rank or constant.

  • SIGNERSCORE_SIGNED_MASK
    This bitmask can be used to determine whether a driver rank indicates that a driver is signed. To determine this, perform a bitwise AND between the driver rank and this constant and, if the result is zero, the driver is signed; otherwise, the driver is not signed.

For more information about driver ranking, see How Windows Ranks Drivers (Windows Vista and Later).

 

 

Send comments about this topic to Microsoft