Blog Post

Windows Hardware Certification
1 MIN READ

Changes to driver signing for Windows 7, Windows Server 2008 R2, and Windows Server 2008

Naim_Mohammad's avatar
Naim_Mohammad
Icon for Microsoft rankMicrosoft
Jun 17, 2021

Effective June 17, 2021, Microsoft partners should utilize the process below to sign drivers for Windows 7, Windows Server 2008, and Windows Server 2008 R2 through the Partner Center for Windows Hardware.

  1. Remove existing signatures from driver binaries.
  2. Generate new catalog files using INF2CAT.
  3. Sign the security catalog files using the IHV/OEM certificate registered with the Partner Center for Windows Hardware.
  4. Add the driver to your HCK file.
  5. Sign the HCK file using the IHV/OEM certificate registered with the Partner Center for Windows Hardware.
  6. Submit the driver package to the Partner Center for Windows Hardware for signing.
  7. Download the signed driver bundle from the Partner Center for Windows Hardware.

As noted in our post on Changes to driver publication for Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2008, Microsoft will discontinue the publication of drivers to Windows Update for Windows 7 SP1, Windows Server 2008, and Windows Server 2008 R2; however, signed drivers will continue to be made available to ensure optimal driver reliability for Volume Licensing customers who have elected to participate in an Extended Security Update (ESU) program. Windows 7, Windows Server 2008, and Windows Server 2008 R2 driver submissions for the Windows Hardware Compatibility Program (WHCP) will continue to be available through January 2023.

 

Published Jun 17, 2021
Version 1.0
  • Joonglee's avatar
    Joonglee
    Copper Contributor

    Our company is an ISV and still support kernel driver for Windows 7 ESU. Is this article is for ISV as well? Can we use the certificate registered with the Partner Center for Windows Hardware?

  • Ellan_Porter's avatar
    Ellan_Porter
    Copper Contributor

    Is our Digitcert SHA2 certificate the IHV/OEM Certificate? If not, how do we get an IHV/OEM Certificate.