"Microsoft is removing trust for kernel drivers that haven't been through the Windows Hardware Compatibility Program, targeting those signed by the long-deprecated cross-signed root program. This change will take effect with the April 2026 Windows Update."
"The policy will roll out in evaluation mode, where the Windows kernel will monitor and audit driver loads to determine potential compatibility issues before fully activating the policy."
"We know driver and application security are required by our customers but cannot come at the expense of compatibility and productivity. Hence the evaluation mode, and keeping essential and reputable cross-signed drivers still trusted in Windows."
Microsoft is discontinuing trust for kernel drivers not certified by the Windows Hardware Compatibility Program by April 2026. This affects legacy applications using cross-signed drivers, which are currently trusted despite expired certificates. The policy will initially operate in evaluation mode to assess compatibility issues. Microsoft aims to balance security and compatibility, allowing administrators to permit custom kernel drivers through specific policies. The initiative addresses past abuses in the cross-signed root program while maintaining trust for essential drivers.
Read at Theregister
Unable to calculate read time
Collection
[
|
...
]