Microsoft is discontinuing its two-decade-long practice of allowing trusted third-party certificate authorities to issue certificates for signing Windows kernel drivers. Starting April 2026, Windows 11 (versions 24H2, 25H2, 26H1) and Windows Server 2025 will, by default, only accept drivers that have completed the full certification process via the Windows Hardware Compatibility Program (WHCP), meaning they have been directly signed by Microsoft. This move is designed to enhance the security and integrity of the Windows kernel by centralizing driver authentication.
