Windows Driver Signing Requirements

The requirements for signing driver kits for Windows have changed as of January 2016, specifically:
  • All drivers for Windows 10 must be signed by Microsoft
  • Drivers for older versions of Windows may continue to be OEM signed
  • OEM signed drivers must use an SHA2 certificate
  • Drivers signed with an SHA 1 certificate and date stamped before January 1, 2016 will continue to work until January 1, 2017
  • HCK kits for Windows 8 are not supported (Windows 8 has been deprecated)
This table summarizes the available types of USBLAN for Windows kits.
USBLAN Kit Type
Signed by
Windows 10
Windows 8.1
Windows 8
Windows 7
32 bit
64 bit
32 bit
64 bit
32 bit
64 bit
32 bit
64 bit
Development Beta
Belcarra
-
-
y
y
y
y
y
y
Development Beta Windows 10
Microsoft
y
y
-
-
-
-
-
-
Win 7/ 8.1 Production
Belcarra
-
-
y
y
y
y
y
y
Production Win10
Microsoft
y
y
-
-
-
-
-
-
HCK
Microsoft
-
-
y
y
-
-
y
y
HLK
Microsoft
y
y
-
-
-
-
-
-
Notes:

  1. Microsoft has deprecated Windows 8 with the last updates for it being made available as of January 12, 2016. Operating systems get a support lifecycle of ten years but Microsoft has deemed that Windows 8.1 is service pack to Windows 8. You can defer installation of service packs by two years but after than you need to upgrade to continue to receive updates.
  2. HCK kits which are signed by Microsoft are not supported on Windows 8.
  3. Windows 8 continues to be supported by Belcarra OEM signed drivers.
  4. HCK kits may be made available from Windows Update (for Windows 7 and Windows 8.1).
  5. Belcarra Windows 7 USBLAN kits are double signed with SHA1 and SHA2 certificates. (Unpatched Windows 7 do not support SHA2 certificates. Patched versions of Windows 7 may not support drivers signed after January 1, 2016 with SHA1.)
  6. Production USBLAN Win10 and HLK kits are functionally identical, both are signed by Microsoft. HLK kits can be made available through Windows Update.

Favourites