What is the new process for signing drivers for Windows IOT?

Question

Now that the cross-signing certificates have expired, per https://learn.microsoft.com/en-us/windows-hardware/drivers/install/deprecation-of-software-publisher-certificates-and-commercial-release-certificates - What is the process for signing drivers and other components in order to create a Windows IOT retail image?

I have joined the hardware dev center program in partner center, but I have no idea what to do next.

Answer 1

Microsoft is focused on Windows 10 IoT vNext, which will be the merger of IoT Core and IoT Enterprise. The current build process for IoT Core will not be moving forward. My guess is that the internal team is focused on this effort and hasn't had time to fix this issue. Also, the pandemic has put a strain on resources from what I am hearing. IoT Core is suppose to be supported for 10 years so they have to come up with something. I would contact your distributor to press for a solution.

Here is an article on the merging of the two: Microsoft to combine Windows 10 IoT Core and IoT Enterprise in 2021

My advise would be to focus on IoT Enterprise and not do anything with IoT Core.

Answer 2

Hi,

Lab 1g: Build a retail image
https://learn.microsoft.com/en-us/windows-hardware/manufacture/iot/build-retail-image

The cross-signing certificate is used in the above official document. There is currently no updated document for reference.

A similar thread:
https://social.msdn.microsoft.com/Forums/en-US/48187d66-9b42-4684-987a-e594fa1d8503/how-to-build-a-retail-image-as-for-today?forum=WindowsIoT

Answer 3

Lab 1g refers to the old procedure, which I have already been using. The cross-signing certificates have all expired, so this procedure cannot be used any more. That is why I am asking the question.

The post that you linked has a response which states "... Microsoft is working to provide an alternate retail signing mechanism and target to provide them early next year.". That post is dated July 2020, so we are a few months past "early next year".

So what I am asking is: what the new process is that Microsoft has come up with?

Answer 4

If you are asking about signing device drivers in general, Microsoft appears to want the drivers submitted to them: Driver Signing.

If this is just to build a IoT Core Retail version, your guess is as good as mine. I would recommend going back to your Microsoft distributor and put the question to them who will drive the question to Microsoft.

Answer 5

Thanks Sean, Yes it is to build an IOT core retail version. I guess if you don't know the new process, then there isn't one (PS: I got started by reading one of your e-books!). I have a copy of my workspace from before the cross-signing certificates expired, so I zipped up the "already signed" drivers from that, and am using that zip with Import-IoTBSP in my build script, and that works OK for now, but it is seeming a bit like Microsoft have lost interest in Windows IOT?