KMCS is used to ensure that content is served only to an identified kernel when it flows through the PC. Microsoft considers a kernel "identified" if all kernel-mode drivers on the system are signed by a source that Microsoft trusts. KMCS is an important step that helps ensure great consumer experiences by providing increased device reliability and access to next-generation entertainment experiences. System and device manufacturers are urged to get their kernel-mode drivers signed.
Currently, the following signing methods are accepted for kernel-mode modules:
Signed through the WHQL testing program as part of a driver package submission. For further information, see the WHQL Web site, which is listed in "Resources" at the end of this paper.
Signed by the vendor, by using the KMCS process. This process uses the vendor’s code-signing certificate together with the cross certificate.
For complete information about the signing process, see the WHDC Web site's "Driver Signing" page, which is listed in "Resources" at the end of this paper.
|
