Windows Driver Signing Requirements

The requirements for signing driver kits for Windows have changed as of January 2016, specifically:

• All drivers for Windows 10 must be signed by Microsoft
• Drivers for older versions of Windows may continue to be OEM signed
• OEM signed drivers must use an SHA2 certificate
• Drivers signed with an SHA 1 certificate and date stamped before January 1, 2016 will continue to work until January 1, 2017
• HCK kits for Windows 8 are not supported (Windows 8 has been deprecated)
• Windows 7 requires special signing to ensure unpatched systems continue to work

This table summarizes the available types of USBLAN for Windows kits.

USBLAN Kit Type	Signed by	Windows 10		Windows 8.1		Windows 8		Windows 7
		32 bit	64 bit	32 bit	64 bit	32 bit	64 bit	32 bit	64 bit
Development Beta	Belcarra	-	-	y	y	y	y	y	y
Development Beta Windows 10	Microsoft	y	y	-	-	-	-	-	-
Win 7/ 8.1 Production	Belcarra	-	-	y	y	y	y	y	y
Production Win10	Microsoft	y	y	-	-	-	-	-	-
HCK	Microsoft	-	-	y	y	-	-	y	y
HLK	Microsoft	y	y	-	-	-	-	-	-

Notes:

1. Microsoft has deprecated Windows 8 with the last updates for it being made available as of January 12, 2016. Operating systems get a support lifecycle of ten years but Microsoft has deemed that Windows 8.1 is service pack to Windows 8. You can defer installation of service packs by two years but after than you need to upgrade to continue to receive updates.
2. HCK kits which are signed by Microsoft are not supported on Windows 8.
3. Windows 8 continues to be supported by Belcarra OEM signed drivers.
4. HCK kits may be made available from Windows Update (for Windows 7 and Windows 8.1).
5. Belcarra Windows 7 USBLAN kits are double signed with SHA1 and SHA2 certificates. (Unpatched Windows 7 do not support SHA2 certificates. Patched versions of Windows 7 may not support drivers signed after January 1, 2016 with SHA1.)
6. Production USBLAN Win10 and HLK kits are functionally identical, both are signed by Microsoft. HLK kits can be made available through Windows Update.