...
AIUI, that is true for XP. But Vista will not install drivers that
are not digitally signed by Microsoft. I don't use Vista, so have
no first hand experience. If what you say is true, why do the
hardware vendors use it as an excuse not to produce Vista drivers?
Drivers from HP for their products are digitally signed by HP, not by
Microsoft. Drivers from nVidia are digitally signed by nVidia, not by
Microsoft. Digitally signed and certified are not the same thing. A
driver can be digitally signed by the producer of that driver but
never get certified by Microsoft.
Why would you waste time to recompile a driver to generate a
Vista-specific one with the XP-compatible driver works just as well?
So the hardware may not have a driver that stipulates it is Vista
*certified* but it will still work. The same happened when XP showed
up: user were installing Win2000 drivers into WinXP although those
drivers were not *certified* for use in WinXP (and whether or not they
were digitally signed).
Even in Windows XP, you will get prompted if the driver is not
digitally signed (not whether or not it has been Microsoft certified).
Go read:
http://www.microsoft.com/whdc/winlogo/drvsign/drvsign.mspx
"Administrator privilege is required to install unsigned kernel-mode
components."
"Digital signatures are required for hardware-related drivers and
other kernel components submitted for the Windows Logo Program."
That does not require that Microsoft is the signature owner. The
hardware vendor signs their own software. Think about it: if
Microsoft signed the driver, you would not have the confirmation to
show that it was really written by, say, HP or Intel. Also see
http://msdn2.microsoft.com/en-us/library/aa906287.aspx. The Windows
Driver Kit (WDK) is free
(
http://www.microsoft.com/whdc/DevTools/WDK/WDKpkg.mspx) but you do
have to register. Considering the level at which a driver executes,
would you want to install one that wasn't signed?
See
http://www.microsoft.com/whdc/winlogo/default.mspx for the Windows
Logo program. It merely means that you get to put a "badge" on your
software. Not having the badge does not prevent installing the
software.
For how drivers are installed in Windows Vista (and other versions),
read the .doc provided at
http://www.microsoft.com/whdc/driver/install/InstallRules.mspx.
Notice it says, "For Windows Vista, all driver packages must be
trusted to be installed. They can be signed either by Microsoft
through the Windows Logo Program or by another trusted entity through
Microsoft Authenticode® technology." So you could have Microsoft do
the signing (after they do the certification) but that is not
required. Trust also means that YOU can choose to trust an unsigned
driver but you will need to do so while logged in under an admin-level
account. However, it is on the x64 platform where security is more
rigid for Windows Vista in that ALL drivers must be signed. That
doesn't mean they need to signed by Microsoft, just signed.
A driver does not need to be badged by Microsoft as certified. A
driver doesn't even need to be signed to be installed - but would you
install an unsigned driver? If signed, it doesn't need to be signed
by Microsoft (unless, of course, Microsoft produced it).