Changes to driver signing for Windows 7, Windows Server 2008 R2, and Windows Server 2008

Published Jun 17 2021 11:51 AM 1,626 Views
Microsoft

Effective June 17, 2021, Microsoft partners should utilize the process below to sign drivers for Windows 7, Windows Server 2008, and Windows Server 2008 R2 through the Partner Center for Windows Hardware.

  1. Remove existing signatures from driver binaries.
  2. Generate new catalog files using INF2CAT.
  3. Sign the security catalog files using the IHV/OEM certificate registered with the Partner Center for Windows Hardware.
  4. Add the driver to your HCK file.
  5. Sign the HCK file using the IHV/OEM certificate registered with the Partner Center for Windows Hardware.
  6. Submit the driver package to the Partner Center for Windows Hardware for signing.
  7. Download the signed driver bundle from the Partner Center for Windows Hardware.

As noted in our post on Changes to driver publication for Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2008, Microsoft will discontinue the publication of drivers to Windows Update for Windows 7 SP1, Windows Server 2008, and Windows Server 2008 R2; however, signed drivers will continue to be made available to ensure optimal driver reliability for Volume Licensing customers who have elected to participate in an Extended Security Update (ESU) program. Windows 7, Windows Server 2008, and Windows Server 2008 R2 driver submissions for the Windows Hardware Compatibility Program (WHCP) will continue to be available through January 2023.

 

1 Comment
Occasional Visitor

Is our Digitcert SHA2 certificate the IHV/OEM Certificate? If not, how do we get an IHV/OEM Certificate.

%3CLINGO-SUB%20id%3D%22lingo-sub-2460039%22%20slang%3D%22en-US%22%3EChanges%20to%20driver%20signing%20for%20Windows%207%2C%20Windows%20Server%202008%20R2%2C%20and%20Windows%20Server%202008%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2460039%22%20slang%3D%22en-US%22%3E%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EEffective%20June%2017%2C%202021%2C%20Microsoft%20partners%20should%20utilize%20the%20process%20below%20to%20sign%20drivers%20for%20Windows%207%2C%20Windows%20Server%202008%2C%20and%20Windows%20Server%202008%20R2%20through%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fwindows-hardware%2Fdrivers%2Fdashboard%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EPartner%20Center%20for%20Windows%20Hardware%3C%2FA%3E.%3C%2FP%3E%0A%3COL%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%20margin-top%3A%2020px%3B%22%3ERemove%20existing%20signatures%20from%20driver%20binaries.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EGenerate%20new%20catalog%20files%20using%20INF2CAT.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3ESign%20the%20security%20catalog%20files%20using%20the%20IHV%2FOEM%20certificate%20registered%20with%20the%20Partner%20Center%20for%20Windows%20Hardware.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EAdd%20the%20driver%20to%20your%20HCK%20file.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3ESign%20the%20HCK%20file%20using%20the%20IHV%2FOEM%20certificate%20registered%20with%20the%20Partner%20Center%20for%20Windows%20Hardware.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3ESubmit%20the%20driver%20package%20to%20the%20Partner%20Center%20for%20Windows%20Hardware%20for%20signing.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EDownload%20the%20signed%20driver%20bundle%20from%20the%20Partner%20Center%20for%20Windows%20Hardware.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EAs%20noted%20in%20our%20post%20on%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fwindows-hardware-certification%2Fchanges-to-driver-publication-for-windows-7-sp1-windows-server%2Fba-p%2F2459992%22%20target%3D%22_blank%22%3EChanges%20to%20driver%20publication%20for%20Windows%207%20SP1%2C%20Windows%20Server%202008%20R2%2C%20and%20Windows%20Server%202008%3C%2FA%3E%2C%20Microsoft%20will%20discontinue%20the%20publication%20of%20drivers%20to%20Windows%20Update%20for%20Windows%207%20SP1%2C%20Windows%20Server%202008%2C%20and%20Windows%20Server%202008%20R2%3B%20however%2C%20signed%20drivers%20will%20continue%20to%20be%20made%20available%20to%20ensure%20optimal%20driver%20reliability%20for%20Volume%20Licensing%20customers%20who%20have%20elected%20to%20participate%20in%20an%20Extended%20Security%20Update%20(ESU)%20program.%20Windows%207%2C%20Windows%20Server%202008%2C%20and%20Windows%20Server%202008%20R2%20driver%20submissions%20for%20the%20Windows%20Hardware%20Compatibility%20Program%20(WHCP)%20will%20continue%20to%20be%20available%20through%20January%202023.%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2460039%22%20slang%3D%22en-US%22%3E%3CP%3EEffective%20June%2017%2C%202021%2C%20utilize%20these%20steps%20to%20sign%20drivers%20for%20Windows%207%2C%20Windows%20Server%202008%2C%20and%20Windows%20Server%202008%20R2.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2502493%22%20slang%3D%22en-US%22%3ERe%3A%20Changes%20to%20driver%20signing%20for%20Windows%207%2C%20Windows%20Server%202008%20R2%2C%20and%20Windows%20Server%202008%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2502493%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20our%20Digitcert%20SHA2%20certificate%20the%20IHV%2FOEM%20Certificate%3F%20If%20not%2C%20how%20do%20we%20get%20an%20IHV%2FOEM%20Certificate.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Co-Authors
Version history
Last update:
‎Jun 17 2021 11:51 AM
Updated by: