Digital Signatures for Kernel Modules on x64-based Systems Running Windows Vista

  • [アーティクル]

This is an important change for Vista drivers.  The biggest change, from my perspective is this...

"Note: Even users with administrator privileges cannot load unsigned kernel-mode code on x64-based systems. This applies for any software module that loads in kernel mode, including device drivers, filter drivers, and kernel services."

Tripp has a good take on the changes.

Comments

  • Anonymous
    January 23, 2006
    The comment has been removed
  • Anonymous
    January 23, 2006
    What Will Dean said. Me 1.99, i.e. me too except for one point.

    I would rather manipulate the registry or whatever, using known programmatic techniques, instead of pushing buttons on a dialog that was designed to be seen. I've been shafted twice by automatic button pushers.
  • Anonymous
    January 24, 2006
    Norman,

    Of course - I'd have much rather we could have turned the warnings off too. The button pushing is a desperate last resort, however loudly the Raymond Chens of this world may be heard scoffing from their ivory towers.

    Will
  • Anonymous
    January 25, 2006
    Drivers DigSig is generally good move with one exception: currently it requires Verisign certificate and so establishes Verisign monopoly
  • Anonymous
    January 31, 2006
    I was reading the comments on craigrow's blog about WHQL signing and I saw a rather interesting comment...
  • Anonymous
    January 23, 2008
    PingBack from http://softwareinformation.247blogging.info/craigrow-digital-signatures-for-kernel-modules-on-x64-based-systems/