"Microsoft is implementing a significant change to Windows kernel driver handling by discontinuing trust in drivers signed via the outdated cross-signed root program, allowing only WHCP-approved drivers."
"The change will be rolled out with the April 2026 Windows update, affecting Windows 11 24H2, 25H2, 26H1, and Windows Server 2025, enforcing stricter security measures."
"The cross-signed root program allowed developers to sign drivers with less stringent security, leading to potential abuse and certificate theft, which Microsoft aims to eliminate."
"An evaluation phase will be introduced to determine if the new policy can be enabled without issues, ensuring that systems remain functional during the transition."
Microsoft is discontinuing trust in drivers signed via the outdated cross-signed root program. Only drivers approved through the Windows Hardware Compatibility Program will be permitted. This change, effective with the April 2026 Windows update, may render some older drivers and hardware non-functional. The initiative aims to bolster security while maintaining compatibility. Kernel drivers, which have direct system access, will now require verification to prevent security risks associated with the previous signing method. An evaluation phase will assess the impact of this policy on existing drivers.
Read at Techzine Global
Unable to calculate read time
Collection
[
|
...
]