In order to ensure the security of the driver and avoid the user from the driver that is not conducive to the stability and security of the system, the driver signature is established. Originally this process was done by a **signing certificate, but now instead it requires WHQL authentication of the driver. This article will introduce in detail why hardware drivers need WHQL digital signatures, I hope it can be helpful to you.
Why should hardware drivers have WHQL digital signatures?
In fact, this is due to Microsoft's new policy: from the end of April 2021, the signing certificate will no longer be accepted to digitally sign the driver, and instead it will need to be done for the driverWHQL certified。Since the driver works in the kernel mode of the system, the vast majority of the driver must be tested and certified by WHQL, so as to obtain the digital signature officially released by Microsoft before it can work normally.
If a hardware driver does not have a digital signature issued by Microsoft, it will be warned by Windows at the time of installation, indicating that there is no digital signature or the driver does not have a publisher, and it is more likely that the device driver will not start and will not work. That's why hardware drivers have WHQL digital signatures.
There are no WHQL certified drivers).
AcquiredWHQL digital signaturesWhat are the benefits?
Enhance the user experience。WHQL-certified drivers allow users to have a better experience using Windows applications.
Digitally signed for better compatibility。If the device driver is digitally signed and certified, it means that the driver has passed the Windows compatibility test, so that it has better compatibility.
Microsoft logo advantage。Use the "Designed for Windows" logo on your products and packaging to gain the benefit of Microsoft's brand and user recognition that your products are compatible with Windows.
Free to publish, easier to update。Digitally signed drivers are distributed free of charge on Windows Update, so customers can easily get the latest Windows-related software updates.
Global authority, get the priority opportunity to be purchased。Available in the global Windows Catalog as well as HCL product tables. **Agencies, medium and large enterprises, etc., often refer to whether the products are in these lists when purchasing related products.
Bug feedback to assist in improvement。Access to Microsoft Online Crash Analytics (OCA) to help companies improve the quality of their signature driver software and target devices with user error data.
How to get itWHQL digital signaturesThis?
1. Apply for an EV** signature certificate.
Driver developers must submit new drivers to Microsoft through the Windows Hardware Dev Center portal. The Windows Hardware Development Center account registration process requires the signing of the specified file with an EV** signing certificate in order to complete the account registration. Therefore, the first thing to do is to find a professional certificate service organization (such as Ruicheng) to apply for an ev** signing certificate.
2. Software and hardware driver testing.
After applying for an Azure AD account, you can set up a WHQL test environment according to Microsoft's requirements, and use the test tool (HCK HLK) provided by Microsoft to conduct driver testing.
3. Submit the test report to Microsoft.
After the test is completed, the test results need to be packaged, the file needs to be signed with an ev** signing certificate, and the test report needs to be submitted to Microsoft for review and certification.
4. Obtain Microsoft certification signature.
After Microsoft's strict review, the driver digital signature catalogfile and Microsoft certification report, the hardware product will be authorized by Microsoft's logo, the driver software will be protected with a high level of security, and the company can also release the driver to Windows Update if necessary.
After the above steps, you can obtain a WHQL digitally signed certified driver, thus ensuring the identity of its manufacturer and the integrity of the program, and avoiding the implantation and installation of malware. Ruicheng Information provides REXT SSLTRUS and EV** signature certificates of many well-known brands around the world, as well as professional WHQL certification solutionsto help your drivers get digitally signed.