Reminder: support for root certificates with kernel mode signing capabilities ends next year

stapp · Nov 30, 2020

Microsoft will remove support for root certificates with kernel mode signing capabilities in the Microsoft Trusted Root Program in the first half of 2021.
The change affects devices running Microsoft's Windows 10 operating system only, and drivers that have expired as part of the change won't load, run or install anymore on Windows 10 devices.
Click to expand...

Windows customers who are affected by the change, e.g. when they run older hardware with drivers that have not been updated by the manufacturer in a while, have only a few options to deal with this
Click to expand...

https://www.ghacks.net/2020/11/30/r...nel-mode-signing-capabilities-ends-next-year/

BoerenkoolMetWorst · Dec 1, 2020

If you read the comments, it looks like it may not be the case that tons of windows installations become borked soon:

“What will happen to my existing signed driver packages?
As long as driver packages are timestamped before the expiration date of the intermediate certificate, they will continue working.”
I’m interpreting this statement as “old drivers released before the expiration date will continue to work”.

That seems much more plausible than millions of Windows 10 machines suddenly failing to boot because they’re using old kernel-mode drivers (e.g. disk drivers) that have no update available and their certificate has expired.
Click to expand...

Maybe somebody could confirm this.

Log in or Sign up

Reminder: support for root certificates with kernel mode signing capabilities ends next year

stapp Global Moderator

BoerenkoolMetWorst Registered Member

Log in or Sign up

Reminder: support for root certificates with kernel mode signing capabilities ends next year

stapp Global Moderator

BoerenkoolMetWorst Registered Member

Useful Searches