Windows Vista to require kernel drivers to be signed on x64 based systems

redsolar · Jan 22, 2006, 07:48 AM

For Windows Vista and later versions of the Windows family of operating systems, kernel-mode software must have a digital signature to load on x64-based computer systems.

Why digital signatures? For both consumer and enterprise users of Windows around the world, protecting personal and corporate data remains a top concern. Microsoft is committed to implementing new ways to help restrict the spread of malicious software. Digital signatures for kernel-mode software are an important way to ensure security on computer systems.

Digital signatures allow the administrator or end user who is installing Windows-based software to know whether a legitimate publisher has provided the software package. When users choose to send Windows Error Reporting data to Microsoft after a fault or other error occurs, Microsoft can analyze the data to know which publishers' software was running on the system at the time of the error. Software publishers can then use the information provided by Microsoft to find and fix problems in their software.

N.B. Microsoft says they won't charge for it, but they require that you have a Class 3 Commercial Software Publisher Certificate from Verisign. This costs $500 [EUR 412] per year, and as the name implies, is only available to commercial entities.
_______________________________
Source: Bink, Read more: Microsoft

**dj_stick** · Jan 22, 2006, 08:32 AM

ok, now this is going to kill modded/custom drivers

Judas · Jan 22, 2006, 08:45 AM

not nessaryly...

this doesn't look like it'll happen to home systems..... it looks like it applies to business or corperate systems ....

i mean yes.... we'll see this being required.. but i'm sure there will be a method in which modded sets will still work..

calidan · Jan 22, 2006, 08:46 AM

How will this work with beta drivers then?

RIV@NVX · Jan 22, 2006, 12:45 PM

Quote:

Originally Posted by calidan

How will this work with beta drivers then?

You likely won't be able to install them. It's very lame solution, IMO.

coldfrontt · Jan 22, 2006, 01:42 PM

According to the white paper, there will be a way for the user to turn of the enforcement module, allowing unsigned drivers to be installed. There's always a work-around, otherwise you could not develop and test drivers in the first place.

ChrisW · Jan 22, 2006, 04:57 PM

Well, that means no more free third party drivers. Nobody is going to pay the outrageous fee for the digital signiture for free software.

rudedog · Jan 22, 2006, 10:49 PM

I could see a public key that is shared for free or a very small amount. someone buys a key and setups a community to share this one key, say 10$ to join our community and use our key.

I still think this is very stupid, most problems are not because home or corp users use bad drivers, it's because they keep using outdated drivers.

Partizan · Jan 22, 2006, 11:06 PM

Perhaps Microsoft wants us to use Linux instead?

Regards, Partizan

Vikingod · Jan 22, 2006, 11:16 PM

I dont think this is as big an issue as some are making it out to be. I can't possibly believe they wouldn't allow for this to be turned off by an administrator. If they didn't, I would be death for the OS, or at least a huge drawback (I know I wouldn;t buy it). Lets just see how this one turns out.

SFOSOK · Jan 22, 2006, 11:23 PM

Kinda like how people stayed at win 98 till XP came out

(raises hand)

Jan 22, 2006, 07:48 AM	#1
redsolar Off duty Join Date: Jul 2003 Location: Las Vegas, USA Posts: 1,242 Rep Power: 0 System Specs	Windows Vista to require kernel drivers to be signed on x64 based systems For Windows Vista and later versions of the Windows family of operating systems, kernel-mode software must have a digital signature to load on x64-based computer systems. Why digital signatures? For both consumer and enterprise users of Windows around the world, protecting personal and corporate data remains a top concern. Microsoft is committed to implementing new ways to help restrict the spread of malicious software. Digital signatures for kernel-mode software are an important way to ensure security on computer systems. Digital signatures allow the administrator or end user who is installing Windows-based software to know whether a legitimate publisher has provided the software package. When users choose to send Windows Error Reporting data to Microsoft after a fault or other error occurs, Microsoft can analyze the data to know which publishers' software was running on the system at the time of the error. Software publishers can then use the information provided by Microsoft to find and fix problems in their software. N.B. Microsoft says they won't charge for it, but they require that you have a Class 3 Commercial Software Publisher Certificate from Verisign. This costs $500 [EUR 412] per year, and as the name implies, is only available to commercial entities. _______________________________ Source: Bink, Read more: Microsoft __________________ Real_Men_Do_Not_Use_Space_Bar Main rig: Intel Core i7 930 @ 4.0 Ghz \| Corsair H50 Push/Pull \| 12GB OCZ DDR3 \| ASUS Radeon HD 5850 \| 3x 1TB Samsung F3 RAID5 on Dell PERC 5i SAS + 1TB Hitachi \| MSI X58 Pro-e \| 850W Antec Truepower Quattro \| RocketFish by Lian Li Full Tower Case \| Gateway XHD3000 30" LCD \| Dell 2408WFP 24" LCD \| Dell 2407WFP 24" LCD \| Logitech Z-5500 Speakers \| Windows 7 Ultimate x64 Laptop: Samsung x360-34P \| Core 2 Duo SU9400 1.4 GHz \| 4GB DDR3 \| 128GB Samsung SSD \| Intel 4500M w/ HDMI \| WiFi \| Bluetooth \| 13.3" WLED 1280x800 \| Windows 7 Professional x64

Jan 22, 2006, 08:46 AM	#4
calidan Frozen in Carbonite Join Date: Mar 2003 Location: Kansas City, MO Posts: 1,409 Rep Power: 0 System Specs	How will this work with beta drivers then? __________________ Steam Community :: ID :: calidan "Don't try to be like Jackie. There is only one Jackie.... Study computers instead." - Jackie Chan

Jan 22, 2006, 01:42 PM	#6
coldfrontt DriverHeaven Lover Join Date: Aug 2002 Location: canada Posts: 248 Rep Power: 0	According to the white paper, there will be a way for the user to turn of the enforcement module, allowing unsigned drivers to be installed. There's always a work-around, otherwise you could not develop and test drivers in the first place. __________________ [color=blue]TANSTAAFL![/color]

Jan 22, 2006, 10:49 PM	#8
rudedog DriverHeaven Junior Member Join Date: Mar 2003 Location: Florida, USA Posts: 80 Rep Power: 0	I could see a public key that is shared for free or a very small amount. someone buys a key and setups a community to share this one key, say 10$ to join our community and use our key. I still think this is very stupid, most problems are not because home or corp users use bad drivers, it's because they keep using outdated drivers. __________________ [color=Blue]Not so Rude,Rudedog http://www.FPSadmin.com[/color] Main Box:AMD Athlon 64X2 4800[color=Red]\|[/color]ASUS A8N-SLI Delux BIOS-1015 Nforce 6.66[color=Red]\|[/color]2GB(1GBx2)crucial Ballistix DDR PC4000[color=Red]\|[/color]2x BFG 7800GTXOC 512-83.40[color=Red]\|[/color]74Gig Raptor SATA[color=Red]\|[/color]4x WD 250Gb SATA[color=Red]\|[/color]2x Lite-on 1673S DVDRW-all[color=Red]\|[/color]X-Fi Fatal1ty 2.07.0004[color=Red]\|[/color]Logitec G7-setpoint 2.46.544[color=Red]\|[/color]Ergodex DX1-firmware 1.1-driver1.1[color=Red]\|[/color]-Dell UltraSharp 2405FPW 24-inch LCD[color=Red]\|[/color]PCPower and Cooling TurboCool 850 SSI[color=Red]\|[/color]Windows XP Professional Service Pack 2, DirectX 9.0c(4.09.0000.0904)[color=Red]\|[/color]Klipsch THX 5.1[color=Red]\|[/color] Second Box:FX-55[color=Red]\|[/color]ASUS A8N-SLI Delux BIOS-1015 Nforce 6.66\|2GB(1GBx2)DDR PC4000[color=Red]\|[/color]2x eVGA 7800GTX -81.89[color=Red]\|[/color]74Gig Raptor SATA\|2x WD 120Gb SATA[color=Red]\|[/color]Sony DVDRW DRU-500A[color=Red]\|[/color]Turtle Beach Santa Cruz-5.12.1.4193[color=Red]\|[/color]Antec true 550[color=Red]\|[/color]Windows XP Professional Service Pack 2, DirectX 9.0c(4.09.0000.0904)[color=Red]\|[/color]

Jan 22, 2006, 11:06 PM	#9
Partizan Fun loving criminal Join Date: Dec 2003 Location: Slovenia Posts: 1,182 Rep Power: 62 System Specs	Perhaps Microsoft wants us to use Linux instead? Regards, Partizan __________________ Live and let live!

Jan 22, 2006, 04:57 PM	#7
ChrisW DriverHeaven Senior Member Join Date: Mar 2003 Posts: 332 Rep Power: 0	Well, that means no more free third party drivers. Nobody is going to pay the outrageous fee for the digital signiture for free software.

Jan 22, 2006, 11:16 PM	#10
Vikingod Int'l Fish Liaison Join Date: Jul 2004 Location: By the light of lamp I sit and type... Posts: 16,197 Rep Power: 112 System Specs	I dont think this is as big an issue as some are making it out to be. I can't possibly believe they wouldn't allow for this to be turned off by an administrator. If they didn't, I would be death for the OS, or at least a huge drawback (I know I wouldn;t buy it). Lets just see how this one turns out.

Jan 22, 2006, 11:23 PM	#11
SFOSOK 939 Goin Strong Join Date: Jul 2005 Location: Ontario Posts: 7,033 Rep Power: 90 System Specs	Kinda like how people stayed at win 98 till XP came out (raises hand) __________________ Warning - Explicit Content Preceeding METAL!!