Yepamberi manejimendi yezvitupa zvekutyaira uye masiginecha muWindows

  • Windows inoda vatyairi vakasainwa nezvitupa zvinoshanda uye SHA-2 algorithms kuti ive nechokwadi chekutendeseka uye chokwadi.
  • Iyo Partner Center inokutendera iwe kunyoresa, kuvandudza uye kukanzura zvitupa zveEV uye kusaina vatyairi vachishandisa CAB uye siginecha yekupupurira.
  • Kuremara kusaina mutyairi kunowedzera njodzi ye rootkits, saka inofanirwa kungoshandiswa muzviitiko zvinodzorwa zvakanyanya.
  • Zvishandiso zvakaita seDriverView uye Bit4id PKI Maneja anobatsira kubata vatyairi, smartcards, uye zvitupa munzvimbo dzepamusoro.

Yepamberi manejimendi yezvitupa zvekutyaira uye masiginecha muWindows

La Yepamberi manejimendi yezvitupa zvekutyaira uye masiginecha muWindows Yakave nyaya yakakosha kune vatariri vehurongwa, vanogadzira, uye vashandisi vepamberi zvakafanana. Sezvo Microsoft yakasimbisa kusaina marongero mu64-bit Windows, chero mutyairi anomhanya mukernel modhi anofanirwa kusainwa nemazvo uye, muzviitiko zvakawanda, zvakare kupfuura nemasisitimu ekusimbisa eMicrosoft. Wedzera kune idzi shanduko senge inosungirwa kutorwa kweSHA-2 kana yekusimbisa kusaina, uye zvinhu zvinogona nyore kuoma pasina kunzwisisa kwakanaka kwese.

Pamusoro peizvi zvese, munzvimbo chaidzo dzepasirese, munhu anofanirwa kubata nazvo Vatyairi vekare, zvishandiso zvisina tsigiro yakagadziridzwa, cryptographic makadhi, zvitupa pasmartcardsZvishandiso zvechitatu-bato, basa riri kure, zvishandiso zvisina internet yekuwana, uye kunyange masisitimu achiri mukugadzira ari kushanda Windows 7 kana Windows XP zvese zvinhu zvekufunga nezvazvo. Muchirevo chechinyorwa chino, kunzwisisa mashandiro anoita masiginecha edhijitari, ndeapi marudzi ezvitupa anoshandiswa, mafambisirwo aanoitwa muHardware Panel, uye ndedzipi sarudzo dzinowanikwa kana chimwe chinhu chikatadza kwakakosha kudzivirira kupambadza maawa pazvikanganiso zvecryptic uye kukanganisa kuchengetedza system.

Chii chinonzi mutyairi kusaina muWindows uye nei zvakakosha?

MuWindows, a Mutyairi akasaina anosanganisira siginecha yedhijitari yakabatana neyemutyairi package (mabhinari, INF mafaera, mabhuku, nezvimwewo). Iyi siginicha inoshandisa zvinangwa zvikuru zviviri: kuona kuti pasuru yacho haina kugadziridzwa kubva pakaburitswa muparidzi (kutendeseka) uye kusimbisa kuzivikanwa kwemutengesi anoisaina (uchokwadi). Pane 64-bit masisitimu kubvira Windows Vista, mutemo wekutanga wakajeka: kernel-modhi madhiraivha anofanirwa kusainwa kana kuti haazoregi.

Patinoisa mudziyo, iyo system pachayo inoshandisa digital siginecha uye zvitupa Kuona kuti pasuru yemutyairi inobva kumuparidzi akavimbika uye haina kukanganiswa pakufamba. Kana chimwe chinhu chichiita sechakashata (siginicha isiriyo, chitupa chakapera, isingatsigirwe algorithm, yakagadziridzwa kabhuku, nezvimwewo), Windows inopa yambiro, inovhara kuisirwa, kana kungodzivirira mutyairi kurodha pakutanga.

Uyezve, kubvira mavhezheni ekutanga e Windows 10, Microsoft yanga ichida kuti vatyairi vafambe nechiteshi chayo. siginicha kuburikidza neHardware Development Center uye kuti SHA-2 algorithms inoshandiswa. Izvi hazvingokanganisa mabhinari akasainwa neMicrosoft, asiwo madhiraivha echitatu akasainwa neSHA1 kana nezvitupa zvisingachanzi zvakachengeteka zvinogamuchirwa kana kurambwa.

Shanduko siginicha yemutyairi: kubva kuSHA1 kuenda kuSHA2 uye nyaya dzekuenderana

Imwe yemapoinzi yakakonzera kurwadza kwemusoro ndeye shanduko ye SHA1 kusvika SHA2 mune siginicha yemutyairiKutanga Windows 10 vhezheni 1507, vatyairi vese vakasainwa neHardware Center vanoshandisa SHA-2. Pamusoro pezvo, mamwe kernel-mode mabhanari anosanganisira maviri maviri masiginecha (SHA1 uye SHA-2) kubva kune wechitatu-bato vatengesi anogona kukonzera matambudziko pamasystem pamberi Windows 10, kana kutopunzika Windows 10 uye gare gare shanduro kana zvimwe zvigadziriso zvisina kuiswa.

Kunyanya, Microsoft yakanyorwa zviitiko umo vatyairi vakasaina uye vakaiswa nezvitupa zviviri Ivo vanga vasiri kurodha nemazvo kana kuti vaigona kukonzera bhuruu zvidzitiro pane masisitimu pasina machira akakomba. Kuti udzivise izvi, zvakakurudzirwa kuisa zvigadziriso zvakaita seKB 3081436, iyo yakaburitsawo maSHA hashes emafaira akakanganisika, ichibvumira kuoneswa kana sisitimu yaishandisa zvinetswa mabhinari.

Iyi yakasanganiswa mamiriro yaireva kuti, kana uchiendesa vatyairi munzvimbo dzine maWindows mavhezheni akasiyana, zvakakosha kuti uongorore kusaina zvinodiwa neshanduro yekushandisa system uye ive nechokwadi chekuti musanganiswa wehash algorithm, rudzi rwechitupa, uye nzira yekusaina inowirirana nepuratifomu yega yega.

Administrator basa muPartner Center uye mutyairi chitupa manejimendi

Kana tichitaura nezvevagadziri vehardware uye makambani anogovera vatyairi, basa re Partner Center maneja (yaimbova Hardware Developer Center) Munhu uyu ndiye akakosha. Ivo vane basa rekutonga zvitupa zvekusaina kodhi zvinoshandiswa kusaina vatyairi uye nekuzviendesa kuMicrosoft kusaina kana kubvumidza.

Kubva paPartner Center hardware panel, maneja anogona Wedzera, vandudza, uye ukanzura zvitupa zvekusainaKuti uite izvi, pinda, pinda muakaunti yako kana zvigadziriso zvemugadziri, uye enda kuchikamu che "Tonga zvitupa". Kubva ipapo, unogona kuwedzera zvitupa zvitsva, kudhawunirodha mafaera anoda kusainwa (akadai seyechinyakare Signablefile.bin), uye woisa zvakasainwa zvakare.

Iyo yakajairika maitiro ekunyoresa chitupa inosanganisira kurodha bhinari faira rakapihwa neMicrosoft, Saina neSignTool uchishandisa /fd sha256 uye yakakodzera SHA-2 timestamp, uye rodha iro rinobuda faira. Windows Hardware Dev Center ichasimbisa kuti chitupa ndechekambani uye ichachibatanidza neaccount yekusaina pasuru yemutyairi, kungave kuburikidza nekupupura kana kuburikidza neyakajairwa certification maitiro.

Kuwana nekuvandudza zvitupa zveEV kusaina vatyairi

Kusaina vatyairi padanho rehunyanzvi, kunyanya kana humbowo huchidikanwa kana vatyairi vachizoburitswa kuburikidza neWindows Update, zvakakosha kuve ne EV (Yakawedzerwa Kusimbiswa) kodhi yekusaina chitupa Zvakaburitswa nesangano rinozivikanwa retifiketi. Izvi zvitupa zvinoda kusimbiswa kwakasimba kwesangano, asi mukudzoka zvinopa mwero wepamusoro wekuvimba.

Nzira yakajairika inotanga nekusarudza rudzii rwechitupa chekusaina kodhi Rudzi rwechitupa cheEV chinodiwa zvinoenderana nemutyairi, shanduro dzeWindows dzinotsigirwa, uye zvinodiwa neMicrosoft. Kana uchinge uchitova nechitupa chiri kushanda uye usingade kuchinja vanopa, unogona kuishandisa zvakare. Zvikasadaro, iwe unofanirwa kutora nyowani EV chitupa mushure mekunge chitupa chekambani chasimbiswa neCA.

Kana kupihwa kwabvumidzwa, mupi wetifiketi anopa mirairo ye Tora chitupa cheEVChitupa ichi chinowanzo chengetwa pamudziyo wehardware (USB tokeni kana HSM) kana kuiswa muchitoro chezvitupa zvakachengeteka. Chitupa ichi, pamwe chete neSignTool kana maturusi akaenzana, zvichashandiswa kusaina kutumira maCAB, mabhuku, uye, kazhinji, mabhanari emutyairi asati aaendesa kuMicrosoft.

Kuwedzera, kugadzirisa, uye kubvisa zvitupa muHardware Panel

Nechitupa cheEV chinoshanda, danho rinotevera nderekuichengeta yakanyoreswa mu Partner Center Hardware PanelKuti uwedzere chitupa chitsva, maneja anopinda, oenda ku "Account Settings" kana "Developer Settings," uyezve "Manage Certificates." Kubva ipapo, vanogona kusarudza "Wedzera chitupa chitsva" uye uteedzere wizard.

Munguva yekuita, iyo system inogadzira a Signablefile.bin faira iyo inofanirwa kudhanilodha uye kusainwa nekambani nyowani yedhijitari chitupa. SignTool inoshandiswa neparameter /fd sha256 uye SHA-2 timestamp, nekudaro kuve nechokwadi chekuti chitupa hachiite chisinga shandiswe kana kushanda kwacho kuchipera kana kusimbiswa kwechinguva kuchidikanwa chero nguva.

Kana iyo faira yasaina, dzokera kuPartner Center uye uiise kubva muchikamu chimwe chete. Kana zvese zviri chokwadi, Chitupa chitsva chichabatanidzwa neakaundi yemugadziri., yakagadzirira kushandiswa mune ramangwana controller kutakura.

Kana chitupa chisisadiwe kana kufungirwa kuti chiri kukanganiswa, zvinogoneka bvisa kubva pane panel pachayoIngoitsvaga mune rondedzero uye shandisa iyo "Bvisa" sarudzo mune yezviito column. Izvi hazvingobvisi masiginicha ese akaitwa nawo (masaini akatopihwa acharamba ari echokwadi muzviitiko zvakawanda), asi zvinodzivirira kuti isashandiswa zvakare mune zvitsva zvinotumirwa kana zvigadziriso.

Siginicha neuchapupu: kusikwa uye kusaina kweCAB yevatongi

La siginicha yekupupura Iyo nzira inobvumira vatyairi kugovaniswa vasina kupinda mukati meyese yechinyakare WHQL certification process, uku uchichengeta siginecha yeMicrosoft uye kutevedzera kernel kurodha mitemo. Kuti uite izvi, faira reCAB rine mutyairi pasuru inogadzirwa uye inotumirwa kuburikidza nePartner Center kuti isayinwe neMicrosoft.

Yakajairika CAB kutumira ine, padiki, mutyairi bhinari faira (semuenzaniso, Echo.sys), iyo inoenderana INF (Echo.inf) uye mafaira echiratidzo chePDB (akadai seEcho.pdb) anodiwa kuti maturusi eMicrosoft aongorore kuraswa kwendangariro kana zvikatadza. Mafaira eCatalog (.cat) anogonawo kuverengerwa kucheki dzemukati dzekambani, kunyangwe Microsoft ichagadzira patsva makatalog ayo panguva yekusaina.

Kugadzirwa kweCAB kunowanzoitwa ne MakeCab uye DDF faira iyo inotsanangura zita reiyo faira inokonzeresa, iyo yemukati folda sangano repakeji, uye mafaera anofanirwa kuverengerwa. DDF inotsanangura maparameter akadai serudzi rwekudzvanya, zita rekubuda (somuenzaniso, Echo.cab), uye dhairekitori rekuenda mukati meCAB (kazhinji kadiki diki kuitira kuti mafaera asava mumudziyo wedhairekitori).

Kana iyo DDF yagadzirwa, murairo weiyo inotevera maitiro unoitwa MakeCab /f Echo.ddfiyo inogadzira iyo CAB faira mune subdirectory (yakadai seDisk1). Ipfungwa yakanaka kuongorora zvirimo kuti uve nechokwadi chekuti ese mabhinari uye INF nePDB mafaera Ivo vakaverengerwa nemazvo vasati vaenda kune inotevera nhanho: kusaina neEV chitupa.

EV siginicha kubva kuCAB uye kuendesa kuburikidza nePartner Center

NeCAB yakagadzirwa, unofanirwa isaine neEV chitupa yesangano. Kune izvi, SignTool inoshandiswa zvakare, ichinongedza kuchitoro chezvitupa panowanikwa EV uye ichitsanangura ese hash algorithm (SHA256) uye URL yenguva yekumisikidza server:

Muenzaniso wekare wemurairo Zvingava chinhu chakadai SignTool sign /s MY /n "Nombre de la empresa" /fd sha256 /tr http://... /td sha256 /v Echo.cabIyi siginicha inovimbisa kuti pasuru yese yakachengetedzwa uye kuti kutendeseka kwayo nemabviro ayo anogona kusimbiswa kunyangwe Microsoft isati yaigadzirisa.

Tevere, iyo yakasainwa CAB inoiswa kubva ku Partner Center panelMuchikamu chitsva chekutumira zvinhu zvehardware, unopa zita kune chigadzirwa, tsanangura yaunoda siginecha zvivakwa (ndeapi marudzi emasiginecha anodiwa pasuru, ndeapi magadzirirwo uye masisitimu anotsigirwa), uye gonesa kana kudzima bvunzo masiginecha zvichienderana nemamiriro ezvinhu.

Kana kutumira kwapera uye kusaina kwapera, mugadziri anogona Dhawunirodha mutyairi akatosaina neMicrosoft kubva pane control panel pachayo. Iyi pasuru inozoiswa pamakomputa evashandisi, kazhinji isina yambiro dzekuchengetedza, chero sisitimu ichivimba nevanobatanidzwa zvitupa zviremera uye cheni yekuvimba yakagadziridzwa zvakanaka.

Kuongororwa kwechiratidzo chemutongi uye EKUs

Yepamberi manejimendi yezvitupa zvekutyaira uye masiginecha muWindows

Kana mutyairi akasaina atorwa, zvakakodzera kuti utarise izvozvo Masiginecha uye zvitupa zvakashandiswa nemazvoKune izvi, chishandiso chereferensi chave zvakare SignTool, ine mirairo yakadai SignTool verify Echo.sys kusimbisa iyo yakakosha siginicha kana mamwe ma paramita akadai /pa /ph /v /d kuti uwane rumwe ruzivo, kusanganisira hashes uye kuoneswa kwemasiginecha ese aripo mufaira.

Pamusoro pekusimbisa mutsara-mutsara, cheki yezvitupa inogona kuitwa kubva kufaira zvivakwa muWindows Explorer. Mu "Digital Signatures" tab Masiginicha akaiswa akanyorwa; nekusarudza imwe uye nekuisa "Details" → "Tarisa chitupa" unogona kuwana ruzivo rwese rwakakodzera rweketani yekuvimba.

Muchitupa chezvinyorwa tab, munda Mashandisirwo Akakosha (EKU) Izvi zvinokutendera kuti usimbise kuti chitupa chakapihwa neakakodzera mawedzero ekusaina kodhi uye vatyairi. Kana maEKU asina kururama, sisitimu inogona kugamuchira cryptographic siginicha asi ichiramba kukwidzwa kwemutyairi nekuti chitupa hachina mvumo yechinangwa ichocho.

Yepamberi manejimendi yeakasainwa controller lifecycle

Maitiro emukati eMicrosoft kusaina kutumira anowanzo sanganisira akati wandei zviito. Kutanga, iyo Inowedzera yakamisikidzwa siginecha yeMicrosoft yakavakirwa paSHA-2 pamutyairi binary. Kana mutengi atoisa masiginecha ayo mubhinari, izvi zvinogona kudhindwa neMicrosoft siginicha kana zvichidikanwa kuti ive nechokwadi chekuenderana nemitemo yekurodha.

Zvadaro, iyo system inogadzira uye zviratidzo faira nyowani (.cat) ine SHA-2 chitupa Katalog yeMicrosoft inotsiva chero katalog yakatanga kutumirwa nemugadziri. Izvi zvinogonesa kutendeseka kwepakeji yese inodzorwa neMicrosoft-yakasainwa catalog, nepo mabhinari ega ega ane masiginecha anotevedzera kernel-modhi mitemo.

Kana mutyairi aiswa paWindows (ingave uchishandisa devcon, pnputil, custom installers, kana kuburikidza neWindows Update), kana kugadzirisa kwacho kwakarurama, mameseji akadai se "Windows haigone kuonesa muparidzi weiyi software yekutyaira" haifanirwe kuoneka. Idzi mhando dzeyambiro dzinowanzo ratidza matambudziko neketani yezvitupa, masiginicha asina kukwana, makatalogi asina kunyoreswa, kana kusapindirana nehurongwa hwekusaina.

Vatyairi mukati Windows 10 uye yekutanga mutyairi manejimendi

Kubva pamaonero emushandisi wekupedzisira kana nyanzvi yekutsigira, chishandiso chekutanga chekutarisa mamiriro evatyairi mukati Windows 10 ndiyo Mudziyo wedhizaHeino runyorwa rwakazara rwemidziyo yakaiswa pakombuta: izvo zviri kushanda nemazvo zvinoonekwa pasina zviratidzo zvekunyevera, nepo avo vane matambudziko vakaiswa yero kana tsvuku mifananidzo.

Iyo inokurumidza nzira yekuivhura ndeye kushandisa iyo Tanga kutsvaga menyu Iwe unogona kuwana iyo Dhidhiyo Maneja nekunyora "Chishandiso Maneja" kana nekushandisa Start menyu (Win + X) uye kusarudza inoenderana sarudzo. Kubva pane iyi console, unogona kugadzirisa, kudzima, kusunungura, kana kuongorora zvimiro zvemutyairi wega wega, kusanganisira masiginecha ayo edhijitari.

Mune yakanakira mamiriro, mazhinji maturusi akafukidzwa ne generic kana chaiwo vatyairi Windows pachayo inorodha uye inoisa izvi kuburikidza neWindows Update. Nekudaro, kana sisitimu ikasaziva chimwe chidimbu chehardware, "zvisingazivikanwe zvishandiso" zvinoonekwa, zvinoda mamwe manyorerwo emushandisi kana maneja.

Zvigadzirwa zvisingazivikanwe uye nzvimbo yemanyorero yemutyairi akakodzera

Apo a mudziyo usingazivikanwe une chiratidzo chenyeveroIyo inonyanya kushanda nzira yekuiziva kazhinji ndeyekutarisa yayo Hardware ID. Kubva pazvivakwa zvayo, pane "Details" tab, sarudza "Hardware ID" uye tevedzera tambo dzinotanga nePCI, USB, kana zvimwe prefixes. Tambo idzi dzinosanganisira mugadziri wemudziyo wacho uye chinozivisa mhando.

Uine chiziviso icho chiri muruoko, unogona kutsvaga zvakachengeteka mutyairi anowirirana pane webhusaiti yepamutemo yemugadziri kana, mune dzimwe nguva, mune akasarudzika madhiraivha dhatabhesi. Kamwe pasuru yacho yatorwa, kana iri inotepfenyura inoisa, ingotevera wizard; kana, zvakadaro, ichisvika sefolda izere neINF, SYS, uye mamwe mafaera, uchafanirwa kushandisa sarudzo "Tsvaga mutyairi software pakombuta yako"ichiratidza nzira inoenda kune iyo folda."

Muzviitiko zvakawanda, kunyanya nemidziyo yekare kana misanganiswa isina kujairika yehardware, iyi mhando yekutsvaga yemanyorero ndiyo chete nzira inoshanda yekuita kuti mudziyo ushande zvakajairika, uchigara uchitarisira Dhaunirodha madhiraivha kubva kune akavimbika masosi uye kwete kubva kugeneric portals iyo inounganidza vatyairi vane software isingadikanwi.

Vatyairi vasina siginicha inozivikanwa, maitiro akasarudzika, uye sarudzo dzekuchengetedza

Windows 10 inosanganisira imwe nhanho yekuchengetedza inosanganisira zvinoda kuti vatyairi vasayinwe neMicrosoft kana vatengesi vanovimbwaIzvi zvine hungwaru kubva pakuchengetedza system, asi inogona kuve dambudziko kana iwe uchifanira kuisa madhiraivha ari pamutemo asina kusaina zvakanaka kana asina siginecha inozivikanwa nehurongwa.

Mune shanduro dzakapfuura dzeWindows, iwe unogona kubvuma kuisirwa kwemutyairi asina kusaina aine nyore "Isa zvakadaro," asi kutanga Windows 10, iyo sarudzo yakabviswa zvakanyanya. Kuti uise madhiraivha aya, iwe zvino unofanirwa kushandisa sarudzo senge... kutanga nekusimbisa siginicha kwakadzimwa, bvunzo modhi kana shanduko kune marongero eboka, zvichienderana neiyo system edition.

Iyo yakanyanya kuchengetedza nzira inosanganisira kutangazve Windows mune yakakosha modhi uko inodzima kwenguva pfupi zvinodiwa kune zvidzori zvakasainwaIzvi zvinoitwa kuburikidza nemagadzirirwo ehurongwa (Win + I → Gadziridza & Chengetedza → Kudzoreredza) uchishandisa "Advanced kutanga" uye, mushure mekufamba nemamenu akati wandei ("Troubleshoot" → "Advanced sarudzo" → "Startup Settings"), kusarudza iyo sarudzo inodzima inosungirwa siginecha yekumanikidza mutyairi. Izvi zvinokutendera kuti uise mutyairi anodiwa, kunyangwe dziviriro ichizogoneswa patsva panotangazve.

Dzima kusaina mutyairi: Mapoka eBoka, maitiro ekuyedza, uye BCDEdit mirairo

Munzvimbo dzepamusoro, dzakadai sePro kana Enterprise editions ye Windows 10/11, pane sarudzo yekugadzirisa hunhu hwemasaini emutyairi uchishandisa. mirairo yeboka (Gpedit)Kufamba kuburikidza neKugadziriswa Kwemushandisi → Administrative Matemplate → Sisitimu → Kuisirwa Mutyairi, iwe unowana iyo mutemo "Code kusaina kune vatyairi vemudziyo". Kuiisa ku "Yakaremara" kunodzoreredza kusaina chinodiwa, kunyangwe ichifanirwa kushandiswa nekuchenjerera uye iwe unofanirwa kuziva nezve kuchengetedzwa.

Imwe mukana ndeye Test mode (TESTSIGNING)Izvi zvakagadzirirwa vagadziri vanoshanda nevatyairi vachiri muchikamu chekuyedza. Kuita iyi modhi ne bcdedit /set TESTSIGNING ON (uye kutangazve) inobvumira kurodha kwevatyairi vakasainwa nezvitupa zvebvunzo, kazhinji zvinopihwa nesangano pacharo. Ipo sisitimu iri mune iyi modhi, watermark inoratidzwa padesktop inoratidza kuti iri kushanda munzvimbo yekuyedza.

Iyo yakanyanya kuomesesa sarudzo ndeye kudzima zvachose. controller kuperera anoongorora nemirairo yakadai bcdedit.exe /set nointegritychecks onIzvi zvinobvumira kuisirwa uye kurodha kwechero mutyairi, akasainwa kana asina kusaina, uye nepo achigona kubatsira mumamiriro ezvinhu chaiwo (semuenzaniso, kuchengetedza Hardware yakaoma pasina rutsigiro rwemazuva ano munzvimbo yakasarudzika), inoisa njodzi huru yekuchengetedza. Pese kana nzira iyi ikashandiswa, inokurudzirwa kuti iitezve nayo bcdedit.exe /set nointegritychecks off kana madhiraivha anodiwa aiswa.

Ngozi dzekudzima dziviriro yemasaini emutyairi

Kuzorora kana kudzima marongero ekusaina mutyairi kunovhura musuwo wekutyisidzira zvakanyanya kuoma kuona uye zvakatonyanya kuoma kubvisa: rootkits uye malware yakavharwa sevatongiIzvi zvikamu zvinoremerwa neSYSTEM ropafadzo uye zvinomhanya padanho rakaderera, kugona kutarisa traffic, kubata kutaurirana, kuvharira antivirus uye kuvanda kubva kune chero chekuchengetedza chishandiso.

Kana mutyairi wekunyepedzera werudzi urwu aiswa zvinobudirira, sisitimu inogona kukanganiswa zvachose pasina zviratidzo zviri pachena. Kuonekwa nemagadzirirwo echinyakare ekuchengetedza kwakaoma, sezvo iyo malware ichizvivanza semutyairi ari pamutemo. Muzviitiko zvakawanda, nzira chete yakavimbika yekudzorera muchina une hutachiona ndeye fomati uye dzosera iyo system kubva pakutanga.

Naizvozvo, chero software inosimbirira dzima zvachose kusaina mutyairi Zvikumbiro zvinovimbisa "kunatsiridza mashandiro," "activate zvakavanzika," kana zvipikirwa zvakafanana zvinofanirwa kufungidzirwa sekufungidzira. Zvinogara zvakanaka kutsvaga dzimwe nzira: dzakagadziridzwa zviri pamutemo madhiraivha, akasainwa mavhezheni, anodzorwa bvunzo modhi, kana kunyange kutora Hardware kunze kwenyika kana zvichidikanwa, pane kusiya sisitimu isina kudzivirirwa.

Vatyairi veWindows vachipesana nevatyairi vekugadzira: zvekushandisa uye riini

Imwe pfungwa inounza kuvhiringika kwakasiyana mutsauko uripo pakati pe generic drivers anopihwa neMicrosoft nehurongwa uye vatyairi zvakananga kune mumwe nemumwe mugadziri. Yekutanga inobvumira maturusi mazhinji kuti ashande "kunze kwebhokisi" kana Hardware yakabatana, asi kazhinji inongopa iwo ekutanga mabasa echikamu.

Kana, semuenzaniso, iri multifunction printer, unogona kudhinda pasina matambudziko uchishandisa madhiraivha eWindows, asi kuwana scanner, mapeji epamusoro ekubata mapepa, kana mapaneru emugadziri angave akaoma. Kuti uwane zvakanyanya kubva pachigadzirwa, mhinduro yakanaka ndeye Isa madhiraivha epamutemo uye software kubva kumutengesi.izvo zvinowanzobatanidza masiginecha edijitari anoshanda uye mamwe magadzirirwo esarudzo.

Paunenge uchirodha vatyairi, zvakakosha kuti uve nechokwadi chekuti webhusaiti yauri kushanyira ndiyo chaiyo saiti yemugadziri uye kwete yechitatu-bato portal ichiita semurevereri. A simple trick ndeyekunyatsoongorora Domain URL uye dzivirira vanoisa generic vanovimbisa "kugadzirisa madhiraivha ako ese" asi wedzera adware kana kunyange malware. Pese kana kusaina kwemutyairi kwakagoneswa, Windows ichabatsira kuvharira marudzi aya emapakeji asina chokwadi nekuratidza yambiro kana kudzivirira kuisirwa.

Kuvandudza mutyairi uye maturusi ekuongorora

Kune vashandisi vanosarudza kugovera rimwe rebasa, varipo special utilities yekuona vatyairi vekare uye kupa mazano matsva, akadai seDriver Booster, Driver Talent, AVG Driver Updater, kana mamwe mazano ekugadzirisa seSnappy Driver Installer kana DriverPack Solution. Nepo aya achigona kubatsira pakutsvaga mapakeji akaomarara, anofanirwa kushandiswa nekuchenjerera, achigara achiongorora kwakabva vatyairi vataurwa.

Padivi rekuongorora, zvishandiso zvakaita se DriverView, naNirsoftZvishandiso izvi zvinokutendera kunyora ese madhiraivha akaiswa pane system uye nekukasira kusiyanisa kuti ndeapi eMicrosoft (ane masiginecha anoshanda) uye ndeapi anobva kune vechitatu mapato. Semuenzaniso, ichi chishandiso chinoratidza madhiraivha eMicrosoft ane chena kumashure uye anosimbisa iwo kubva kune mamwe makambani mutsvuku, zvichiita kuti zvive nyore kuona zvinogona kukonzera matambudziko.

DriverView inoita kuti uronge rondedzero nekambani, sefa yekuvanza madhiraivha eMicrosoft uye tarisa kune wechitatu-bato, uye ona ruzivo rwakadzama pamusoro pemutyairi wega wega nekudzvanya kaviri: zita, nzira, shanduro, kambani, nezvimwe. Neruzivo urwu, zviri nyore kusarudza kana mutyairi anofungidzira ari chikamu chesoftware inovimbwa kana kuti anofanira kuburitswa kuti avandudze kugadzikana kwehurongwa kana kuchengetedzwa.

Smartcards, zvitupa pakadhi uye Bit4id PKI Maneja

Munzvimbo dzemakambani uye dzekutonga, zvakajairika kune zvitupa zvinoshandiswa siginecha yemagetsi, kutendeseka kana encryption Iwo anochengetwa pamakadhi akangwara kana cryptographic tokens. Kugadzirisa zvishandiso izvi-kusanganisira PIN, PUK, uye kupinza uye kutumira kunze zvitupa-zvinoda maturusi chaiwo akadai seBit4id PKI Manager uye yakabatana nayo yepakati.

Bit4id PKI Maneja inopa maonero ezvishandiso zvakabatana (vaverengi makadhi, tokeni) uye, mushure mekupinda nePIN, inokutendera kuti utarise mushandisi uye Chiremera Chiremera (CA) zvitupa zvakachengetwa pachishandiso. Kubva pane dashboard yayo, unogona kuita mabasa akadai Vhura PIN nePUK, shandura PIN kana PUK, pinda uye buda Pakadhi, tumidza zita remudziyo kana zvitupa zvekunze ne.p12/.pfx fomati ine kiyi yakavanzika.

Paunenge uchiunza kunze chitupa, chikumbiro chinokukurudzira kuti usarudze faira, isa PIN yekadhi, iyo PFX/P12 mudziyo password, uye nesarudzo, CKA_ID yekushandisa nePKCS#11. Sezvineiwo, inobvumirawo export certificates in .cer formatine kiyi yeruzhinji chete, sezvo kiyi yakavanzika yesmartcard haigone kuburitswa nekuda kwezvikonzero zvekuchengetedza.

Chimwe chinonakidza chekuwedzera chimiro kugona Batanidza otomatiki zvitupa zvekadhi nechitoro chechitupa cheWindowsIzvi zvakakosha kuitira kuti zvikumbiro zvakaita seMicrosoft Edge, Chrome, Opera, kana Adobe Reader zvishandise zvitupa izvi kuratidza kana kusaina magwaro ePDF kubva mukati mebrowser kana application pachayo.

Kuongororwa kweSitifiketi muWindows, mabhurawuza, uye Adobe Reader

Kuti uone kuti makadhi emakadhi akaiswa nenzira kwayo kuhurongwa, unogona kuvhura iyo Windows certificate store Shandisa certmgr.msc kubva paKutanga menyu. Mukati me "Personal" → "Zvitupa" folda, zvitupa zvemushandisi zvakabatana nekadhi zvinofanirwa kuoneka kana iyo yepakati yaita basa rayo nemazvo.

Munyaya yeFirefox, iyo inochengetedza yayo yakazvimirira zvitupa chitoroIwe unofanirwa kutarisa chikamu chekuchengetedza uye zvitupa mune zvaunofarira browser. Kana mamodule ePKCS#11 akagadziridzwa nemazvo uye ukaisa PIN yako kana wakumbirwa, zvitupa zvesmartcard zvinozoonekwawo mumatabhu emushandisi nezvitupa.

YeAdobe Acrobat Reader, nzira iri kuburikidza ne "Zvido" menyu → "Siginecha" → "Zvitupa Zvekuvimbwa uye Zvitupa" uye chikamu che "Windows Digital ID". Kana zvitupa zviri muWindows certificate store, Adobe inogona kuzvishandisa zvakanangana kusaina magwaro ePDFIyo yakajairika mafambiro ebasa inosanganisira kusarudza "Shandisa chitupa", kusarudza nzvimbo yePDF ichaiswa siginicha, kusarudza chitupa chakakodzera, uye kupedzisa maitiro nekuisa kadhi PIN kana wakumbirwa.

Kugadzirisa matambudziko akajairika nevatyairi uye zvitupa

Kana mutyairi atanga kuita zvisizvo kana kuti hardware inomira kushanda, chinhu chekutanga kuita kutarisa chiratidzo chinoenderana mu Mudziyo wedhizaChiratidzo cheyero chinoratidza dambudziko nemutyairi: chinogona kunge chakaora, chekare, chakasaina zvisina kunaka, kana kupokana nechimwe chidimbu chesoftware.

Pakati pezviito zvinokurudzirwa kushandiswa kwe Windows yakavakirwa-mukati Hardware dambudzikoNemaoko kugadzirisa mutyairi kubva kuDhidhiyo Maneja, kusunungura uye kudzoreredza mutyairi, kana kutodzokera kune yakapfuura vhezheni kana ichangoburwa yekuvandudza yakaunza dambudziko rose rinogona kugadzirisa nyaya. Muzviitiko zvakawanda, kungobvumira Windows Update kuti idzose mutyairi inogadzirisa kusawirirana.

Mune mamwe mamiriro ezvinhu akaomarara, senge ma-multi-boot kuisirwa ane masisitimu ekare, zvikanganiso senge "Kusaina zvitupa hazvina kuiswa" pakuisa madhiraivha eGPU paWindows 7 zvingada. bvisa nemaoko mafaira ekuisa kubva kumugadziri uye kunongedza iyo yekubvisa folda muChishandiso Maneja kumanikidza kuisirwa iyo chaiyo INF faira. Izvo zvinobatsirawo kuve nechokwadi kuti Windows 7 ine zvigadziriso zvinogonesa SHA-2 (seKB3033929) uye, kana zvimwe zvese zvikatadza, funga kudzima kwechinguva kusaina mutyairi pane iyo chaiyo system, chero ikaramba yakasarudzika uye ichishandisa vatyairi kubva kune yakavimbika sosi.

Chekupedzisira, kana dambudziko rine chekuita nesmartcard zvitupa (asingawirirani maPIN, zvikanganiso kupinda mukati mepakati, kutadza kurodha zvitupa muchitoro), zvinokurudzirwa kuunganidza. ruzivo rwese rwekuongorora kubva kuMutariri wePKI, shanduro dzakaiswa, mhinduro dzebvunzo mumabhurawuza uye maapplication, uye tumira kune anopa kadhi kana Chitupa Chiremera kuti vakurumidze kugadzirisa kwechiitiko.

Mukuona kwezvose zviri pamusoro, zviri pachena kuti iyo Yepamberi manejimendi yezvitupa zvekutyaira uye masiginecha muWindows Haisi nyaya ye "kuita kuti mudziyo ushande," asi yekubatanidza chengetedzo, kugarisana, uye maitiro akanakisa: kusarudza iyo chaiyo kodhi kusaina zvitupa, kutarisa hupenyu hwavo muPartner Center, nekuremekedza SHA-2 marongero, kuziva nguva uye sei kuzorora kusaina zvirambidzo, kusimudzira maturusi seDriverView kana Bit4id PKI Maneja, uye pamusoro pezvose, nguva dzose kudhawunirodha uye zvitupa kubva mutyairi kurodha nekuisa zvitupa kubva pakuvimba nekuisa zvitupa. kushanda, uye dziviriro pakutyisidzira kwakaderera.