Driver signature requirements for Windows

The Digital Signature allows administrators and end users who want to install Windows-based software to see if the software package is provided by a legal publisher.

In Windows Vista and Windows Server 2008, the new functions use the code signature technology, and the operating system has new security requirements, thus enhancing the use of digital signatures for several types of code.

The following digital signatures apply to Windows Vista and Windows Server 2008:

• Administrator permission is required to install unsigned kernel mode components. This includes device drivers, filter drivers, and services.

This applies to all development stages, including non-product coding stages such as pre-release product code and testing.

• For Windows Vista and Windows Server 2008 of x64 versions, kernel mode code signature (kmcs) is required to load kernel mode software.
• The components in Windows Vista protected media path (PMP) must be signed by PMP, and all other kernel mode components must be scheduled by Microsoft for the Windows logo (formerly known as "WHQL signature ") or kernel mode code signature to ensure access to advanced content.
• For Windows Vista and Windows Server 2008 of X86 and x64 versions, the driver binary file loaded during the boot phase must contain the embedded signature, as described in "kernel mode code signature Drill" on this site.
• The installation package downloaded through Internet Explorer and the Self-extracting executable file must be digitally signed for running and installation.
• Hardware-related drivers and other kernel components submitted for the Windows logo program require digital signatures.
• The component must be signed by a Windows "trusted" Certificate, as described in the White Paper on this site.

Http://msdn.microsoft.com/zh-cn/library/windows/hardware/gg487317
Http://msdn.microsoft.com/en-us/library/ff548239.aspx