question on cross certificate

From: qwert <qwert@xxxxxxxxxxxxxxxxxxxxxxxxx>
Date: Thu, 14 Aug 2008 05:44:01 -0700

I tried signing my driver binary as per the procedure in kmcs_walkthrough.doc
It works fine.But I dont understand few things.

Signtool sign /v /ac MSCV-VSClass3.cer /s my /n contoso.com /t
http://timestamp.verisign.com/scripts/timestamp.dll mydriver.sys

In the above command they have used /ac option where the cross certificate
MSCV_VSClass3.cer is used.cant we sign the binary using the pfx file itself???

what is the diff between the two(pfx and cross certificate signed)

.

Follow-Ups:
- Re: question on cross certificate
  - From: Gianluca Varenni

Prev by Date: WHQLDT@microsoft.com gives me email bounces
Next by Date: Beta testing website
Previous by thread: WHQLDT@microsoft.com gives me email bounces
Next by thread: Re: question on cross certificate
Index(es):
- Date
- Thread

Relevant Pages

Re: 64-bit Vista and driver cross signing
... Take a look at the Vista 64bit signing discussion in the OsrOnline/NtDev ... drivers be additionally signed with a cross certificate from Microsoft. ... Could someone offer an equivalent SignTool.exe command line (as compared ...
(microsoft.public.development.device.drivers)
Re: Signtool /ac option does nothing
... The path should be okay, I got an error when I used only the file name of the cross certificate. ... Something else I tried was running signtool with the signwizard command, but this gave the same results. ...
(microsoft.public.development.device.drivers)