Microsoft has announced significant revisions to its driver development and signing policies for Windows. The updated guidelines, previously applicable only to antivirus software vendors, now extend to a broader category of driver developers.
Advertisеment
To obtain a digital signature under the new framework, developers must successfully complete a series of additional certification tests. These assessments evaluate the security posture and fault tolerance of driver code, leading to higher quality benchmarks before deployment on Windows systems.
Reducing access to Windows Kernel
Over the next several years, Microsoft plans to minimize the volume of third-party code operating in kernel mode. This includes drivers for common hardware such as network adapters, cameras, USB devices, and printers. The company will expand its library of built-in drivers and enhance the Windows API suite, enabling OEMs to adopt standardized Microsoft solutions instead of developing proprietary kernel-mode alternatives.
Continued Support for Specialized Kernel Drivers
Microsoft confirms it will maintain support for third-party kernel-mode drivers in areas where integrated solutions do not exist. Graphics drivers, for instance, will remain in kernel mode to support performance and feature requirements. However, even these specialized drivers must now comply with new technical mandates.
New Technical Safeguards for Kernel Drivers
All kernel-mode drivers must implement compiler constraints to enforce strict behavioral boundaries. Additionally, drivers must run in isolated environments to limit the consequences of potential failures. Microsoft also requires the use of DMA remapping to block unauthorized access to kernel memory, further reducing the risk of system-wide instability.
These policy changes follow the widespread disruption caused by a faulty CrowdStrike driver update in July 2024, which made millions of Windows devices inoperable. Microsoft’s revised approach reflects a strategic effort to prevent similar incidents through proactive engineering and certification controls.
Support us
Winaero greatly relies on your support. You can help the site keep bringing you interesting and useful content and software by using these options:
