[Libosinfo] [PATCH 2/5] installer, windows: Support driver certificates

[Zeeshan Ali (Khattak)]

From: "Zeeshan Ali (Khattak)" <zeeshanak at gnome.org>

If a driver is not signed by Microsoft, a dialog is displayed to user
asking if he/she trusts the driver vendor. This breaks unattended
installation for Windows 7 so this patch adds all driver certificates
provided to the trusted ring before attempting to install any drivers.

Although this is not a problem in Windows XP, it doesn't hurt to do this
for XP as well.
---
 data/install-scripts/windows-cmd.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/data/install-scripts/windows-cmd.xml b/data/install-scripts/windows-cmd.xml
index 7a56846..1b62fe7 100644
--- a/data/install-scripts/windows-cmd.xml
+++ b/data/install-scripts/windows-cmd.xml
@@ -69,6 +69,7 @@ if not "<xsl:value-of select="config/avatar-location"/>"=="" copy "<xsl:value-of
 REGEDIT /S <xsl:call-template name="script-disk"/>:\windows.reg
 <xsl:call-template name="post-install-drivers-disk"/>:
 reg add "HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing" /v BehaviorOnFailedVerify /t reg_dword /d 00000000 /f
+for %%i in ("<xsl:call-template name="post-install-drivers-disk"/>:<xsl:value-of select="config/post-install-drivers-location"/>\*.cer") do cmd /c certutil -addstore "TrustedPublisher" %%i
 for %%i in ("<xsl:call-template name="post-install-drivers-disk"/>:<xsl:value-of select="config/post-install-drivers-location"/>\*.cmd") do cmd /c %%i
 reg add "HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing" /v BehaviorOnFailedVerify /t reg_dword /d 00000001 /f
 EXIT
-- 
1.8.1.2