{"action":"closed","issue":{"url":"https://api.github.com/repos/MicrosoftDocs/windows-driver-docs/issues/445","repository_url":"https://api.github.com/repos/MicrosoftDocs/windows-driver-docs","labels_url":"https://api.github.com/repos/MicrosoftDocs/windows-driver-docs/issues/445/labels{/name}","comments_url":"https://api.github.com/repos/MicrosoftDocs/windows-driver-docs/issues/445/comments","events_url":"https://api.github.com/repos/MicrosoftDocs/windows-driver-docs/issues/445/events","html_url":"https://github.com/MicrosoftDocs/windows-driver-docs/issues/445","id":316933230,"node_id":"MDU6SXNzdWUzMTY5MzMyMzA=","number":445,"title":"Ambiguous rules for 64-bit driver on Windows 10 with Secure Boot enabled","user":{"login":"fpl9000","id":1024399,"node_id":"MDQ6VXNlcjEwMjQzOTk=","avatar_url":"https://avatars3.githubusercontent.com/u/1024399?v=4","gravatar_id":"","url":"https://api.github.com/users/fpl9000","html_url":"https://github.com/fpl9000","followers_url":"https://api.github.com/users/fpl9000/followers","following_url":"https://api.github.com/users/fpl9000/following{/other_user}","gists_url":"https://api.github.com/users/fpl9000/gists{/gist_id}","starred_url":"https://api.github.com/users/fpl9000/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fpl9000/subscriptions","organizations_url":"https://api.github.com/users/fpl9000/orgs","repos_url":"https://api.github.com/users/fpl9000/repos","events_url":"https://api.github.com/users/fpl9000/events{/privacy}","received_events_url":"https://api.github.com/users/fpl9000/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":{"login":"tedhudek","id":14337110,"node_id":"MDQ6VXNlcjE0MzM3MTEw","avatar_url":"https://avatars3.githubusercontent.com/u/14337110?v=4","gravatar_id":"","url":"https://api.github.com/users/tedhudek","html_url":"https://github.com/tedhudek","followers_url":"https://api.github.com/users/tedhudek/followers","following_url":"https://api.github.com/users/tedhudek/following{/other_user}","gists_url":"https://api.github.com/users/tedhudek/gists{/gist_id}","starred_url":"https://api.github.com/users/tedhudek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tedhudek/subscriptions","organizations_url":"https://api.github.com/users/tedhudek/orgs","repos_url":"https://api.github.com/users/tedhudek/repos","events_url":"https://api.github.com/users/tedhudek/events{/privacy}","received_events_url":"https://api.github.com/users/tedhudek/received_events","type":"User","site_admin":false},"assignees":[{"login":"tedhudek","id":14337110,"node_id":"MDQ6VXNlcjE0MzM3MTEw","avatar_url":"https://avatars3.githubusercontent.com/u/14337110?v=4","gravatar_id":"","url":"https://api.github.com/users/tedhudek","html_url":"https://github.com/tedhudek","followers_url":"https://api.github.com/users/tedhudek/followers","following_url":"https://api.github.com/users/tedhudek/following{/other_user}","gists_url":"https://api.github.com/users/tedhudek/gists{/gist_id}","starred_url":"https://api.github.com/users/tedhudek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tedhudek/subscriptions","organizations_url":"https://api.github.com/users/tedhudek/orgs","repos_url":"https://api.github.com/users/tedhudek/repos","events_url":"https://api.github.com/users/tedhudek/events{/privacy}","received_events_url":"https://api.github.com/users/tedhudek/received_events","type":"User","site_admin":false}],"milestone":null,"comments":5,"created_at":"2018-04-23T18:38:36Z","updated_at":"2018-06-13T21:53:52Z","closed_at":"2018-06-13T21:53:52Z","author_association":"NONE","body":"Hello,\n\nThis page is ambiguous about the signing requirements in a particular use-case: installing a 64-bit driver on Windows 10 with Secure Boot enabled. At the top of the page, we see this:\n\n\"Starting with new installations of Windows 10, version 1607, Windows will not load any new kernel mode drivers which are not signed by the Dev Portal.\"\n\nbut with the exception that:\n\n\"Cross-signed drivers are still permitted if any of the following are true:\n- ...\n- Secure Boot is off.\"\n\nBut in the section titled \"Signing a driver for earlier versions of Windows\", we see a table that says when Secure Boot is enabled, a 64-bit driver must have a WHQL signature, which requires passing HLK/HCK tests.\n\nIt's not clear if this table only applies to Windows 7 and 8 — or to Windows 7, 8, and 10. If the former, then installing a 64-bit driver on Windows 10 with Secure Boot enabled requires attestation-signing the driver. If the latter, then installing a 64-bit driver on Windows 10 with Secure Boot enabled requires a WHQL signature. These are very different requirements.\n\nThanks for your attention to this!\n--\nFran Litterio\n\n---\n#### Document Details\n\n⚠ *Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.*\n\n* ID: 1eb19d33-8f4c-f379-b645-938a746c5615\n* Version Independent ID: 8efb9fb4-1e9a-1a8a-994b-450495449e15\n* Content: [Driver Signing Policy](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/kernel-mode-code-signing-policy--windows-vista-and-later-)\n* Content Source: [windows-driver-docs-pr/install/kernel-mode-code-signing-policy--windows-vista-and-later-.md](https://github.com/MicrosoftDocs/windows-driver-docs/blob/staging/windows-driver-docs-pr/install/kernel-mode-code-signing-policy--windows-vista-and-later-.md)\n* Service: **unspecified**\n* GitHub Login: @tedhudek\n* Microsoft Alias: **windowsdriverdev**"}}
{"actor":{"display_login":"tedhudek"}}