Sterowniki w Windows Vista

[Geo 9]

Microsoft rozesłał dziś informacje na temat steroników (zasad ich instalacji, podpisów cyfrowych itd.) Komunikat autorstawa Annie Pearson (WHDC team) znajduje się poniżej Przepraszam za angielską wersję językową.

 

New Digital Signature Requirements for Windows Vista

For both consumer and enterprise users of Windows around the world, protecting personal and corporate data remains a top concern. Digital signatures help ensure security on computer systems, because they allow administrators or end users who are installing Windows-based software to know whether a legitimate publisher has provided the software package.

To increase the safety and stability of the Microsoft Windows platform, beginning with Windows Vista:

• Users who are not administrators cannot install device drivers that don't have digital signatures. 

• Drivers must be signed for devices that stream protected content. 

• Unsigned kernel-mode software will not load and will not run on x64-based systems.

• To optimize the performance of driver verification at boot time, boot-driver binaries must have an embedded Publisher Identity Certificate (PIC) in addition to the signed .cat file for the package.

The scope of this new policy is far reaching. We have a new paper on the WHDC web site that describes how to manage the signing process for kernel-mode code for Windows Vista, and how to sign a driver package by using tools provided in the Windows Driver Kit (WDK).