In May we posted an article describing signing changes that would be coming to HDC in November. We missed that date by a few days. However as of December 3, 4PM Pacific time our signing changes have gone live.
To recap:
Submissions targeting:
- Windows 7
- Windows Server 2008 R2
- Windows Server 2008
- Windows Server 2008 x64
Are now signed by Microsoft using the SHA-256 WHQL signature. As you know, you must sign your submissions prior to uploading them to HDC. With these changes we've also removed the SHA-1 signature requirement. For now you can use either SHA-1, or SHA-256 code signatures when targeting the above versions of Windows! While we strongly recommend the use of SHA-256. We will continue to support submissions signed with either.
The original notification we published can be found here:
Hardware Partner Center – SHA 1 signing deprecation notice
Microsoft