Summary of Digital Certificate and Windows 10

Xiaofan Chen <[email protected]> Fri, 14 Aug 2015 21:55:07 +0800
Newsgroups gmane.comp.lib.libusb.devel.windows
Message-ID <CAGjSPUBWAsEWD75BQ62jwj_j11G6+i-xrzME1Pdr_J_X-Zk2FA@mail.gmail.com>
So from the following summary, the DigiCert that Travis is using
now will still be good until it expires in  21-June-2017.

Ref:
https://www.osronline.com/showthread.cfm?link=268241
Post 131.

Confirmation:
https://www.osronline.com/showthread.cfm?link=269119



Regards,
Xiaofan


___________


On Thu, Aug 13, 2015 at 5:26 AM,  <[email protected]> wrote:
Let me try to restate the rules (this is what we're planning to
publish in The NT Insider... so if it's wrong, I'd appreciate folks
letting me know):

1)       A driver signed with the standard SHA-1 certificate issued
prior to the 29th of July and correctly cross-signed according to the
pre-Windows 10 KMCS procedures, will work on all platforms Vista
through to 10.  This is, however, subject to configurable an
enterprise-defined code integrity policy that is part of Device Guard
(available on Windows 10 Enterprise edition only).  This
enterprise-defined policy may be configured to require at least an
attestation-signed driver.

2)       A driver signed with an EV certificate issued prior to the
29th of July, and cross-signed according to the pre-Windows 10 KMCS
procedure, will work on 8 and above, and will work on Windows 7 /
Server 2008R2 if the patch issued through Windows Update earlier this
year has been applied. It won't work on Vista / Server 2008 though.

3)       A driver signed with any certificate issued after the 29th of
July won't work on Windows 10, unless the driver is signed with a
Microsoft signature available through the SysDev portal.

4)       A portal-signed driver using attestation signing (which
requires an EV certificate) will only work on Windows 10, unless also
signed with an additional valid certificate and cross-signed according
to the pre-Windows 10 KMCS procedure.

5)       A portal-signed driver that passes WLK tests (which requires
an EV certificate) will work on Windows 7 through Windows 10.

6)       Windows Server vNext will only load portal-signed drivers
that have successfully passed the WLK tests.

 Peter
 OSR
 @OSRDrivers

------------------------------------------------------------------------------