diff --git a/.github/workflows/flutter-nightly.yml b/.github/workflows/flutter-nightly.yml
index 4ae281583..2a1254e23 100644
--- a/.github/workflows/flutter-nightly.yml
+++ b/.github/workflows/flutter-nightly.yml
@@ -86,7 +86,7 @@ jobs:
         shell: bash
 
       - name: Build rustdesk
-        run: python3 .\build.py --portable --hwcodec --flutter
+        run: python3 .\build.py --portable --hwcodec --flutter --feature IddDriver
 
       - name: Sign rustdesk files
         uses: GermanBluefox/code-sign-action@v7
diff --git a/Cargo.lock b/Cargo.lock
index d0f22a0ab..1029bfed4 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4943,6 +4943,7 @@ dependencies = [
  "flutter_rust_bridge_codegen",
  "fruitbasket",
  "hbb_common",
+ "hex",
  "hound",
  "image 0.24.5",
  "impersonate_system",
diff --git a/Cargo.toml b/Cargo.toml
index ba92733ca..47c2bb0e7 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -64,6 +64,7 @@ errno = "0.2.8"
 rdev = { git = "https://github.com/fufesou/rdev" }
 url = { version = "2.1", features = ["serde"] }
 dlopen = "0.1"
+hex = "0.4.3"
 
 reqwest = { version = "0.11", features = ["blocking", "json", "rustls-tls"], default-features=false }
 chrono = "0.4.23"
@@ -87,7 +88,7 @@ system_shutdown = "3.0.0"
 [target.'cfg(target_os = "windows")'.dependencies]
 trayicon = { git = "https://github.com/open-trade/trayicon-rs", features = ["winit"] }
 winit = "0.26"
-winapi = { version = "0.3", features = ["winuser"] }
+winapi = { version = "0.3", features = ["winuser", "wincrypt"] }
 winreg = "0.10"
 windows-service = "0.4"
 virtual_display = { path = "libs/virtual_display" }
diff --git a/build.py b/build.py
index 45fe1b132..4a39f596d 100755
--- a/build.py
+++ b/build.py
@@ -37,7 +37,7 @@ def parse_rc_features(feature):
         'IddDriver': {
             'zip_url': 'https://github.com/fufesou/RustDeskIddDriver/releases/download/v0.1/RustDeskIddDriver_x64.zip',
             'checksum_url': 'https://github.com/fufesou/RustDeskIddDriver/releases/download/v0.1/checksum_md5',
-            'exclude': ['README.md'],
+            'exclude': ['README.md', 'certmgr.exe', 'install_cert_runas_admin.bat'],
         },
         'PrivacyMode': {
             'zip_url': 'https://github.com/fufesou/RustDeskTempTopMostWindow/releases/download/v0.1'
diff --git a/flutter/lib/common.dart b/flutter/lib/common.dart
index fce2c852f..666eab0ba 100644
--- a/flutter/lib/common.dart
+++ b/flutter/lib/common.dart
@@ -946,7 +946,6 @@ Widget msgboxContent(String type, String title, String text) {
 void msgBoxCommon(OverlayDialogManager dialogManager, String title,
     Widget content, List<Widget> buttons,
     {bool hasCancel = true}) {
-  dialogManager.dismissAll();
   dialogManager.show((setState, close) => CustomAlertDialog(
         title: Text(
           translate(title),
diff --git a/flutter/lib/desktop/pages/install_page.dart b/flutter/lib/desktop/pages/install_page.dart
index 00ca2bb23..adc0df138 100644
--- a/flutter/lib/desktop/pages/install_page.dart
+++ b/flutter/lib/desktop/pages/install_page.dart
@@ -1,3 +1,5 @@
+import 'dart:io';
+
 import 'package:file_picker/file_picker.dart';
 import 'package:flutter/material.dart';
 import 'package:flutter_hbb/common.dart';
@@ -63,6 +65,7 @@ class _InstallPageBodyState extends State<_InstallPageBody>
   late final TextEditingController controller;
   final RxBool startmenu = true.obs;
   final RxBool desktopicon = true.obs;
+  final RxBool driverCert = true.obs;
   final RxBool showProgress = false.obs;
   final RxBool btnEnabled = true.obs;
 
@@ -145,25 +148,62 @@ class _InstallPageBodyState extends State<_InstallPageBody>
                       .marginOnly(left: em))
                 ],
               ).marginSymmetric(vertical: 2 * em),
-              Row(
-                children: [
-                  Obx(() => Checkbox(
-                      value: startmenu.value,
-                      onChanged: (b) {
-                        if (b != null) startmenu.value = b;
-                      })),
-                  Text(translate('Create start menu shortcuts'))
-                ],
+              TextButton(
+                onPressed: () => startmenu.value = !startmenu.value,
+                child: Row(
+                  children: [
+                    Obx(() => Checkbox(
+                        value: startmenu.value,
+                        onChanged: (b) {
+                          if (b != null) startmenu.value = b;
+                        })),
+                    RichText(
+                      text: TextSpan(
+                        text: translate('Create start menu shortcuts'),
+                        style: DefaultTextStyle.of(context).style,
+                      ),
+                    ),
+                  ],
+                ),
               ),
-              Row(
-                children: [
-                  Obx(() => Checkbox(
-                      value: desktopicon.value,
-                      onChanged: (b) {
-                        if (b != null) desktopicon.value = b;
-                      })),
-                  Text(translate('Create desktop icon'))
-                ],
+              TextButton(
+                onPressed: () => desktopicon.value = !desktopicon.value,
+                child: Row(
+                  children: [
+                    Obx(() => Checkbox(
+                        value: desktopicon.value,
+                        onChanged: (b) {
+                          if (b != null) desktopicon.value = b;
+                        })),
+                    RichText(
+                      text: TextSpan(
+                        text: translate('Create desktop icon'),
+                        style: DefaultTextStyle.of(context).style,
+                      ),
+                    ),
+                  ],
+                ),
+              ),
+              Offstage(
+                offstage: !Platform.isWindows,
+                child: TextButton(
+                  onPressed: () => driverCert.value = !driverCert.value,
+                  child: Row(
+                    children: [
+                      Obx(() => Checkbox(
+                          value: driverCert.value,
+                          onChanged: (b) {
+                            if (b != null) driverCert.value = b;
+                          })),
+                      RichText(
+                        text: TextSpan(
+                          text: translate('idd_driver_tip'),
+                          style: DefaultTextStyle.of(context).style,
+                        ),
+                      ),
+                    ],
+                  ),
+                ),
               ),
               GestureDetector(
                   onTap: () => launchUrlString('http://rustdesk.com/privacy'),
@@ -225,12 +265,47 @@ class _InstallPageBodyState extends State<_InstallPageBody>
   }
 
   void install() {
-    btnEnabled.value = false;
-    showProgress.value = true;
-    String args = '';
-    if (startmenu.value) args += ' startmenu';
-    if (desktopicon.value) args += ' desktopicon';
-    bind.installInstallMe(options: args, path: controller.text);
+    do_install() {
+      btnEnabled.value = false;
+      showProgress.value = true;
+      String args = '';
+      if (startmenu.value) args += ' startmenu';
+      if (desktopicon.value) args += ' desktopicon';
+      if (driverCert.value) args += ' driverCert';
+      bind.installInstallMe(options: args, path: controller.text);
+    }
+
+    if (driverCert.isTrue) {
+      final tag = 'install-info-install-cert-confirm';
+      final btns = [
+        dialogButton(
+          'Cancel',
+          onPressed: () => gFFI.dialogManager.dismissByTag(tag),
+          isOutline: true,
+        ),
+        dialogButton(
+          'OK',
+          onPressed: () {
+            gFFI.dialogManager.dismissByTag(tag);
+            do_install();
+          },
+          isOutline: false,
+        ),
+      ];
+      gFFI.dialogManager.show(
+        (setState, close) => CustomAlertDialog(
+          title: null,
+          content: SelectionArea(
+              child:
+                  msgboxContent('info', 'Warning', 'confirm_idd_driver_tip')),
+          actions: btns,
+          onCancel: close,
+        ),
+        tag: tag,
+      );
+    } else {
+      do_install();
+    }
   }
 
   void selectInstallPath() async {
diff --git a/src/core_main.rs b/src/core_main.rs
index 60a7d9c9c..76b630f88 100644
--- a/src/core_main.rs
+++ b/src/core_main.rs
@@ -143,6 +143,10 @@ pub fn core_main() -> Option<Vec<String>> {
                 #[cfg(feature = "with_rc")]
                 hbb_common::allow_err!(crate::rc::extract_resources(&args[1]));
                 return None;
+            } else if args[0] == "--install-cert" {
+                #[cfg(windows)]
+                hbb_common::allow_err!(crate::platform::windows::install_cert(&args[1]));
+                return None;
             } else if args[0] == "--portable-service" {
                 crate::platform::elevate_or_run_as_system(
                     click_setup,
diff --git a/src/lang/ca.rs b/src/lang/ca.rs
index 1e3b4930d..3cea5e60e 100644
--- a/src/lang/ca.rs
+++ b/src/lang/ca.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/cn.rs b/src/lang/cn.rs
index 94f0cd2d6..161fa0358 100644
--- a/src/lang/cn.rs
+++ b/src/lang/cn.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", "分辨率"),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", "安装虚拟显示器驱动，以便在没有连接显示器的情况下启动虚拟显示器进行控制。"),
+        ("confirm_idd_driver_tip", "安装虚拟显示器驱动的选项已勾选。请注意，测试证书将被安装以信任虚拟显示器驱动。测试证书仅会用于信任Rustdesk的驱动。")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/cs.rs b/src/lang/cs.rs
index e7fb7684f..86e9c47c7 100644
--- a/src/lang/cs.rs
+++ b/src/lang/cs.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/da.rs b/src/lang/da.rs
index 08758d7d1..d262c08cf 100644
--- a/src/lang/da.rs
+++ b/src/lang/da.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/de.rs b/src/lang/de.rs
index 78d6d6c15..21e57701c 100644
--- a/src/lang/de.rs
+++ b/src/lang/de.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", "Auflösung"),
         ("No transfers in progress", "Keine Übertragungen im Gange"),
         ("Set one-time password length", "Länge des Einmalpassworts festlegen"),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/el.rs b/src/lang/el.rs
index 89458bec6..b0e629ba7 100644
--- a/src/lang/el.rs
+++ b/src/lang/el.rs
@@ -460,6 +460,8 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Codec", "Κωδικοποίηση"),
         ("Resolution", "Ανάλυση"),
         ("No transfers in progress", "Δεν υπάρχει μεταφορά σε εξέλιξη"),
-		("Set one-time password length", "Μέγεθος κωδικού μιας χρήσης"),
-        ].iter().cloned().collect();
+        ("Set one-time password length", "Μέγεθος κωδικού μιας χρήσης"),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
+    ].iter().cloned().collect();
 }
diff --git a/src/lang/en.rs b/src/lang/en.rs
index 250530013..100788f6e 100644
--- a/src/lang/en.rs
+++ b/src/lang/en.rs
@@ -45,5 +45,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("config_microphone", "In order to speak remotely, you need to grant RustDesk \"Record Audio\" permissions."),
         ("relay_hint_tip", "It may not be possible to connect directly, you can try to connect via relay. \nIn addition, if you want to use relay on your first try, you can add the \"/r\" suffix to the ID, or select the option \"Always connect via relay\" in the peer card."),
         ("No transfers in progress", ""),
+        ("idd_driver_tip", "Install virtual display driver which is used when you have no physical displays."),
+        ("confirm_idd_driver_tip", "The option to install the virtual display driver is checked. Note that a test certificate will be installed to trust the virtual display driver. This test certificate will only be used to trust Rustdesk drivers.")
         ].iter().cloned().collect();
 }
diff --git a/src/lang/eo.rs b/src/lang/eo.rs
index 63995a918..f36afedcb 100644
--- a/src/lang/eo.rs
+++ b/src/lang/eo.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/es.rs b/src/lang/es.rs
index fb45ddcd0..2b38ecd1e 100644
--- a/src/lang/es.rs
+++ b/src/lang/es.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", "Resolución"),
         ("No transfers in progress", "No hay transferencias en curso"),
         ("Set one-time password length", "Establecer contraseña de un solo uso"),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/fa.rs b/src/lang/fa.rs
index 9c24ca6c3..0cc8188b2 100644
--- a/src/lang/fa.rs
+++ b/src/lang/fa.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", "وضوح"),
         ("No transfers in progress", "هیچ انتقالی در حال انجام نیست"),
         ("Set one-time password length", "طول رمز یکبار مصرف را تعیین کنید"),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/fr.rs b/src/lang/fr.rs
index 7cb6d1239..ef74b0666 100644
--- a/src/lang/fr.rs
+++ b/src/lang/fr.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/hu.rs b/src/lang/hu.rs
index f9ff3bd0f..f984afcdd 100644
--- a/src/lang/hu.rs
+++ b/src/lang/hu.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/id.rs b/src/lang/id.rs
index e210432c0..53f718e82 100644
--- a/src/lang/id.rs
+++ b/src/lang/id.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/it.rs b/src/lang/it.rs
index 7dfc67f29..c3b77ddf7 100644
--- a/src/lang/it.rs
+++ b/src/lang/it.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", "Risoluzione"),
         ("No transfers in progress", "Nessun trasferimento in corso"),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/ja.rs b/src/lang/ja.rs
index 48391d8f2..4a0fc3abb 100644
--- a/src/lang/ja.rs
+++ b/src/lang/ja.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/ko.rs b/src/lang/ko.rs
index 91b73fc45..a3aef55cc 100644
--- a/src/lang/ko.rs
+++ b/src/lang/ko.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/kz.rs b/src/lang/kz.rs
index 9d7cf3971..8b7582af3 100644
--- a/src/lang/kz.rs
+++ b/src/lang/kz.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/nl.rs b/src/lang/nl.rs
index 5b959a353..6fb537119 100644
--- a/src/lang/nl.rs
+++ b/src/lang/nl.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", "Resolutie"),
         ("No transfers in progress", "Geen overdrachten in uitvoering"),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/pl.rs b/src/lang/pl.rs
index 4d99f3be2..d60fe2d30 100644
--- a/src/lang/pl.rs
+++ b/src/lang/pl.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", "Rozdzielczość"),
         ("No transfers in progress", "Brak transferów w toku"),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/pt_PT.rs b/src/lang/pt_PT.rs
index e568daeb5..2747a0ca7 100644
--- a/src/lang/pt_PT.rs
+++ b/src/lang/pt_PT.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/ptbr.rs b/src/lang/ptbr.rs
index 54389652c..e8fca4b80 100644
--- a/src/lang/ptbr.rs
+++ b/src/lang/ptbr.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/ro.rs b/src/lang/ro.rs
index 14675762c..e4521305f 100644
--- a/src/lang/ro.rs
+++ b/src/lang/ro.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/ru.rs b/src/lang/ru.rs
index adc5872a3..473ec402f 100644
--- a/src/lang/ru.rs
+++ b/src/lang/ru.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", "Разрешение"),
         ("No transfers in progress", "Передача не осуществляется"),
         ("Set one-time password length", "Установить длину одноразового пароля"),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/sk.rs b/src/lang/sk.rs
index 1031fb9d2..aeed03fcd 100644
--- a/src/lang/sk.rs
+++ b/src/lang/sk.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/sl.rs b/src/lang/sl.rs
index b1b5dbeb0..eaa8b1b50 100755
--- a/src/lang/sl.rs
+++ b/src/lang/sl.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/sq.rs b/src/lang/sq.rs
index a73a5f10c..46f14c738 100644
--- a/src/lang/sq.rs
+++ b/src/lang/sq.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/sr.rs b/src/lang/sr.rs
index c4e70bd85..ee48beb32 100644
--- a/src/lang/sr.rs
+++ b/src/lang/sr.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/sv.rs b/src/lang/sv.rs
index 88db1e931..b099acc9d 100644
--- a/src/lang/sv.rs
+++ b/src/lang/sv.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/template.rs b/src/lang/template.rs
index 2255d8aa5..bfab1a33a 100644
--- a/src/lang/template.rs
+++ b/src/lang/template.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/th.rs b/src/lang/th.rs
index e0bfe8846..d77eb5fc1 100644
--- a/src/lang/th.rs
+++ b/src/lang/th.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/tr.rs b/src/lang/tr.rs
index e0d1d5777..d4d0b942d 100644
--- a/src/lang/tr.rs
+++ b/src/lang/tr.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/tw.rs b/src/lang/tw.rs
index 6bf0b0fa8..e1119b12c 100644
--- a/src/lang/tw.rs
+++ b/src/lang/tw.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", "分辨率"),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/ua.rs b/src/lang/ua.rs
index d5142452e..216f764c1 100644
--- a/src/lang/ua.rs
+++ b/src/lang/ua.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/lang/vn.rs b/src/lang/vn.rs
index c71d12d16..c7fbc5b9b 100644
--- a/src/lang/vn.rs
+++ b/src/lang/vn.rs
@@ -461,5 +461,7 @@ pub static ref T: std::collections::HashMap<&'static str, &'static str> =
         ("Resolution", ""),
         ("No transfers in progress", ""),
         ("Set one-time password length", ""),
+        ("idd_driver_tip", ""),
+        ("confirm_idd_driver_tip", "")
     ].iter().cloned().collect();
 }
diff --git a/src/platform/windows.rs b/src/platform/windows.rs
index 3d8b415b5..696a18ab9 100644
--- a/src/platform/windows.rs
+++ b/src/platform/windows.rs
@@ -1108,6 +1108,12 @@ if exist \"{tmp_path}\\{app_name} Tray.lnk\" del /f /q \"{tmp_path}\\{app_name}
     );
     let src_exe = std::env::current_exe()?.to_str().unwrap_or("").to_string();
 
+    let install_cert = if options.contains("driverCert") {
+        format!("\"{}\" --install-cert \"RustDeskIddDriver.cer\"", src_exe)
+    } else {
+        "".to_owned()
+    };
+
     let cmds = format!(
         "
 {uninstall_str}
@@ -1139,6 +1145,7 @@ sc create {app_name} binpath= \"\\\"{exe}\\\" --import-config \\\"{config_path}\
 sc start {app_name}
 sc stop {app_name}
 sc delete {app_name}
+{install_cert}
 {after_install}
 {sleep}
     ",
@@ -1159,6 +1166,7 @@ sc delete {app_name}
         shortcuts=shortcuts,
         config_path=Config::file().to_str().unwrap_or(""),
         lic=register_licence(),
+        install_cert=install_cert,
         after_install=get_after_install(&exe),
         sleep=if debug {
             "timeout 300"
@@ -1236,6 +1244,7 @@ fn get_uninstall(kill_self: bool) -> String {
 }
 
 pub fn uninstall_me(kill_self: bool) -> ResultType<()> {
+    allow_err!(cert::uninstall_certs());
     run_cmds(get_uninstall(kill_self), true, "uninstall")
 }
 
@@ -1902,3 +1911,177 @@ pub fn user_accessible_folder() -> ResultType<PathBuf> {
     }
     Ok(dir)
 }
+
+#[inline]
+pub fn install_cert(cert_file: &str) -> ResultType<()> {
+    let exe_file = std::env::current_exe()?;
+    if let Some(cur_dir) = exe_file.parent() {
+        allow_err!(cert::install_cert(cur_dir.join(cert_file)));
+    } else {
+        bail!(
+            "Invalid exe parent for {}",
+            exe_file.to_string_lossy().as_ref()
+        );
+    }
+    Ok(())
+}
+
+mod cert {
+    use hbb_common::{allow_err, bail, log, ResultType};
+    use std::{path::Path, str::from_utf8};
+    use winapi::shared::{
+        minwindef::{BYTE, DWORD, TRUE},
+        ntdef::NULL,
+    };
+    use winapi::um::{
+        errhandlingapi::GetLastError,
+        wincrypt::{
+            CertCloseStore, CertEnumCertificatesInStore, CertNameToStrA, CertOpenSystemStoreA,
+            CryptHashCertificate, ALG_ID, CALG_SHA1, CERT_ID_SHA1_HASH, CERT_X500_NAME_STR,
+            PCCERT_CONTEXT,
+        },
+        winreg::HKEY_LOCAL_MACHINE,
+    };
+    use winreg::{
+        enums::{KEY_WRITE, REG_BINARY},
+        RegKey,
+    };
+
+    const ROOT_CERT_STORE_PATH: &str = "SOFTWARE\\Microsoft\\SystemCertificates\\ROOT\\Certificates\\";
+    const THUMBPRINT_ALG: ALG_ID = CALG_SHA1;
+    const THUMBPRINT_LEN: DWORD = 20;
+
+    #[inline]
+    unsafe fn compute_thumbprint(pb_encoded: *const BYTE, cb_encoded: DWORD) -> (Vec<u8>, String) {
+        let mut size = THUMBPRINT_LEN;
+        let mut thumbprint = [0u8; THUMBPRINT_LEN as usize];
+        if CryptHashCertificate(
+            0,
+            THUMBPRINT_ALG,
+            0,
+            pb_encoded,
+            cb_encoded,
+            thumbprint.as_mut_ptr(),
+            &mut size,
+        ) == TRUE
+        {
+            (thumbprint.to_vec(), hex::encode(thumbprint).to_ascii_uppercase())
+        } else {
+            (thumbprint.to_vec(), "".to_owned())
+        }
+    }
+
+    #[inline]
+    unsafe fn open_reg_cert_store() -> ResultType<RegKey> {
+        let hklm = winreg::RegKey::predef(HKEY_LOCAL_MACHINE);
+        Ok(hklm.open_subkey_with_flags(ROOT_CERT_STORE_PATH, KEY_WRITE)?)
+    }
+
+    // https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-gpef/6a9e35fa-2ac7-4c10-81e1-eabe8d2472f1
+    fn create_cert_blob(thumbprint: Vec<u8>, encoded: Vec<u8>) -> Vec<u8> {
+        let mut blob = Vec::new();
+
+        let mut property_id = (CERT_ID_SHA1_HASH as u32).to_le_bytes().to_vec();
+        let mut pro_reserved = [0x01, 0x00, 0x00, 0x00].to_vec();
+        let mut pro_length = (THUMBPRINT_LEN as u32).to_le_bytes().to_vec();
+        let mut pro_val = thumbprint;
+        blob.append(&mut property_id);
+        blob.append(&mut pro_reserved);
+        blob.append(&mut pro_length);
+        blob.append(&mut pro_val);
+
+        let mut blob_reserved = [0x20, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00].to_vec();
+        let mut blob_length = (encoded.len() as u32).to_le_bytes().to_vec();
+        let mut blob_val = encoded;
+        blob.append(&mut blob_reserved);
+        blob.append(&mut blob_length);
+        blob.append(&mut blob_val);
+
+        blob
+    }
+
+    pub fn install_cert<P: AsRef<Path>>(path: P) -> ResultType<()> {
+        let mut cert_bytes = std::fs::read(path)?;
+        unsafe {
+            let thumbprint = compute_thumbprint(cert_bytes.as_mut_ptr(), cert_bytes.len() as _);
+            log::debug!("Thumbprint of cert {}", &thumbprint.1);
+
+            let reg_cert_key = open_reg_cert_store()?;
+            let (cert_key, _) = reg_cert_key.create_subkey(&thumbprint.1)?;
+            let data = winreg::RegValue {
+                vtype: REG_BINARY,
+                bytes: create_cert_blob(thumbprint.0, cert_bytes),
+            };
+            cert_key.set_raw_value("Blob", &data)?;
+        }
+        Ok(())
+    }
+
+    fn get_thumbprints_to_rm() -> ResultType<Vec<String>> {
+        let issuers_to_rm = ["CN=\"WDKTestCert admin,133225435702113567\""];
+
+        let mut thumbprints = Vec::new();
+        let mut buf = [0u8; 1024];
+
+        unsafe {
+            let store_handle = CertOpenSystemStoreA(0 as _, "ROOT\0".as_ptr() as _);
+            if store_handle.is_null() {
+                bail!("Error opening certificate store: {}", GetLastError());
+            }
+
+            let mut cert_ctx: PCCERT_CONTEXT = CertEnumCertificatesInStore(store_handle, NULL as _);
+            while !cert_ctx.is_null() {
+                // https://stackoverflow.com/a/66432736
+                let cb_size = CertNameToStrA(
+                    (*cert_ctx).dwCertEncodingType,
+                    &mut ((*(*cert_ctx).pCertInfo).Issuer) as _,
+                    CERT_X500_NAME_STR,
+                    buf.as_mut_ptr() as _,
+                    buf.len() as _,
+                );
+                if cb_size != 1 {
+                    if let Ok(issuer) = from_utf8(&buf[..cb_size as _]) {
+                        for iss in issuers_to_rm.iter() {
+                            if issuer.contains(iss) {
+                                let (_, thumbprint) = compute_thumbprint(
+                                    (*cert_ctx).pbCertEncoded,
+                                    (*cert_ctx).cbCertEncoded,
+                                );
+                                if !thumbprint.is_empty() {
+                                    thumbprints.push(thumbprint);
+                                }
+                            }
+                        }
+                    }
+                }
+                cert_ctx = CertEnumCertificatesInStore(store_handle, cert_ctx);
+            }
+            CertCloseStore(store_handle, 0);
+        }
+
+        Ok(thumbprints)
+    }
+
+    pub fn uninstall_certs() -> ResultType<()> {
+        let thumbprints = get_thumbprints_to_rm()?;
+        let reg_cert_key = unsafe { open_reg_cert_store()? };
+        for thumbprint in thumbprints.iter() {
+            allow_err!(reg_cert_key.delete_subkey(thumbprint));
+        }
+        Ok(())
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    #[test]
+    fn test_install_cert() {
+        println!("install driver cert: {:?}", cert::install_cert("RustDeskIddDriver.cer"));
+    }
+
+    #[test]
+    fn test_uninstall_cert() {
+        println!("uninstall driver certs: {:?}", cert::uninstall_certs());
+    }
+}