Submit the driver package to the Partner Center for Windows Hardware for signing.

Sign the HCK file using the IHV/OEM certificate registered with the Partner Center for Windows Hardware.

Sign the security catalog files using the IHV/OEM certificate registered with the Partner Center for Windows Hardware.

Generate new catalog files using INF2CAT.

Remove existing signatures from driver binaries.

Starting today, Microsoft partners are required to go through the following steps the process below to sign drivers for Windows 7, Windows Server 2008, and Windows Server 2008 R2 through the Partner Center for Windows Hardware: Submissions for Windows 7 and Windows Server drivers for the Windows Hardware Compatibility Program (WHCP) will still be available until January 2023. 'If your organization utilizes the Extended Security Updates (ESU) program, you will continue to have the ability to deploy drivers to your managed devices using Windows Server Update Services (WSUS_ and other supported methods,' Mohammad added.

However, signed drivers will still be provided for Volume Licensing customers in an Extended Security Update (ESU) program to ensure optimal driver reliability. Signed drivers still available for ESU customers 'On June 17, 2021, Microsoft will discontinue the publication of drivers to Windows Update for Windows 7 SP1, Windows Server 2008, and Windows Server 2008 R2,' said Naim Mohammad, Technical Program Manager at Microsoft. The change was made to minimize the impact of these issues and the disruptions customers using these Windows versions are experiencing. Systems experience these issues because of code integrity failures triggered by incompatible SHA-2 signed drivers.

The move comes after the expiration of the SHA-1 Trusted Root Certificate Authority for Windows 7 and Windows Server 2008 on May 9, 2021.ĭespite SHA-1 certificates' discontinuation, partners using Microsoft's Trusted Root Program could still publish incompatible SHA-2 signed drivers to unpatched Windows 7 and Windows Server systems causing degraded functionality or preventing devices from booting. Microsoft says it no longer offers drivers for Windows 7 and Windows Server 2008 systems through Windows Update starting today.

Windows 7 driver signature problem