Examining Windows 10 Anniversary Update's Driver Signing Enforcement Policy

Published by

Anandtech published Examining Windows 10 Anniversary Update's Driver Signing Enforcement Policy

A quote from the article:
Windows 10 Anniversary Update came out at the beginning of August, with plenty of new user-facing features. There were also plenty of changes under the hood as well, including a change in policy regarding how Windows 10 handles device drivers.

When the 64-bit versions of Windows launched over a decade ago, as a security measure Microsoft decided to require that all kernel mode drivers must be signed to be loaded. Under the aptly named cross-signing requirement, hardware vendors would need to get a certificate from one of the major certificate authorities, and use that to sign their drivers. The idea being that by enforcing signing restrictions, it would be much harder for malware to masquerade as legitimate drivers.
 Examining Windows 10 Anniversary Update's Driver Signing Enforcement Policy @ Anandtech