Reminder: support for root certificates with kernel mode signing capabilities ends next year
by
Martin Brinkmann on November 30, 2020 in
Hardware,
Windows - Last Update: November 30, 2020 -
No comments
Microsoft will remove support for root certificates with kernel mode signing capabilities in the Microsoft Trusted Root Program in the first half of 2021.
The change affects devices running Microsoft's Windows 10 operating system only, and drivers that have expired as part of the change won't load, run or install anymore on Windows 10 devices.
HOW DO PRODUCTION SIGNING OPTIONS DIFFER BY WINDOWS VERSION?
Driver runs on | Drivers signed before July 1 2021 by | Driver signed on or after July 1 2021 by |
---|
Windows Server 2008 and later, Windows 7, Windows 8 | WHQL or cross-signed drivers | WHQL or drivers cross-signed before July 1 2021 |
Windows 10 | WHQL or attested | WHQL or attested |
Microsoft
published a list of expiration dates for trusted cross-certificates; all listed trusted cross-certificates will expire either in February 2021 or April 2021.