问StartService失败577自签名内核驱动程序，如何修复？

EN

c:\>makecert -r -pe -ss PrivateCertStore -n CN=Contoso.com(Test) -eku 1.3.6.1.5.5.7.3.3 ContosoTest.cer

c:\>certmgr /add ContosoTest.cer /s /r localMachine root
// now manually verified Cert Store, yes the Contoso test cert is there

c:\>Signtool sign /v /fd sha256 /s PrivateCertStore /n Contoso.com(Test) /t http://timestamp.digicert.com "C:\VC\TPriority\x64\TPriorityDriver.sys"

c:\>sc create "TPriority" binPath="c:/windows/system32/drivers/TPriorityDriver.sys" type=kernel

// now copied file TPriorityDriver.sys to "C\Windows\System32\drivers" path

c:\>sc start "TPriority"
[SC] StartService FAILED 577:

Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.