Magic Tray · signing
If this helped, star the projects
- A star on GitHub is free and tells other people the project is used.
- The 2024 mouse driver is not signed by Microsoft yet, so Windows makes you turn on Test Mode.
- Money would buy a real signing certificate so Test Mode can go away — for everyone, not as a monthly fee.
What we want
- A proper code-signing certificate, then Microsoft to sign the 2024 mouse driver.
- After that, the extra scroll piece loads on a normal Windows 11 PC.
- The tray stays free. The driver stays free. Scroll does not turn off if money stops.
GitHub Sponsors
Profile is submitted and pending GitHub staff approval. The Sponsor button will work when they publish it. Goal: EV cert + Microsoft attestation for the v3 KMDF.
Until then
Star Magic Tray and star the v3 driver. Optional Stripe Payment Link is not required for Sponsors — STRIPE-SETUP.md. No cards in the app.
We will not unbind scroll if money stops.
What “signed publicly” means
The app (MagicMouseTray.exe)
- Buy an OV or EV Authenticode cert from a public CA (DigiCert, Sectigo, SSL.com) in a verified name — not a self-signed PFX.
- EV is the one SmartScreen usually trusts on first download; OV still works but reputation builds with volume. EV is typically a USB token or HSM.
- Put the cert in GitHub secrets
SIGN_PFX_BASE64/SIGN_PFX_PASSWORD.scripts/sign-app.ps1already runs onv*tags. Those secrets are empty, so v1.1.0 shipped unsigned. - Timestamp every build. Self-signed Authenticode does not clear “Windows protected your PC.”
The v3 kernel driver (the Test Mode tax)
| Level | User sees | Requires |
|---|---|---|
| Today: test signing | Test Mode + Memory Integrity off | Free |
| Attestation | Loads on normal Windows 10/11 | EV cert + Partner Center / Hardware Dev Center; Microsoft signs the KMDF package |
| WHQL / HLK | Logo, MU-class Secure Boot story | Attestation plus lab tests |
Stars vs Stripe vs subscription
| Funds | We do this? | |
|---|---|---|
| Star both repos | Discoverability | Yes — please |
| GitHub Sponsors → EV + attestation | One signed KMDF for everyone | Pending GitHub approval |
| Stripe Payment Link | Same goal, off GitHub | Optional; Dashboard steps in STRIPE-SETUP.md |
| Subscription that expires the filter | WHQL like MU | No |
Why Windows does not just include this
- Windows has no built-in Magic Mouse driver like Linux does.
- Apple’s old Boot Camp file never listed the 2024 mouse.
- A community driver cannot pretend to be Apple. Microsoft will not logo it for free.
- New PCs turn on extra security by default, so unsigned drivers are blocked.
Research: Why v3 is hard. Practical install: Which driver.