Code-Signing Requirements for PMP Components

Code-Signing Requirements for PMP Components

Components that Must Be Signed

• 
  To satisfy content-providers’ requirement for an "identified kernel," all code that loads into kernel memory in Windows Vista must be signed for identity to allow playback of next-generation premium content.
  
• 
  Display device drivers must have an embedded PVP-OPM or PVP-UAB certificate, in addition to the signing for identity that is required for kernel-mode components.
  

• 
  PVP-OPM certificates are required for all graphics devices.
  
• 
  Where bus encryption is required, PVP-UAB certificates are required.
  

• 
  All user-mode code that loads into the PE must be PMP‑PE signed or signed by WHQL with a PE attribute. This requirement includes components that participate in PUMA.
  
• 
  If the content requires PUMA, kernel-mode drivers that load into the audio stack must be signed with the DRM attribute, which ensures that content that is protected by using Windows Media DRM can be played.