Microsoft stops providing Windows 7 drivers via Windows Update

This move comes after the SHA-1 certificate for Windows 1 and Windows Server 2008 expired on May 9, 2021.

Although SHA-1 certificates are deprecated, partners using the Microsoft Trusted Root Certificate Program can still publish incompatible SHA-2 signed drivers for Windows 7 and Windows systems. Unpatched servers cause degraded functionality or prevent the device from booting.

The system encountered these problems due to code integrity errors triggered by incompatible SHA-2 signed drivers.

The change was made to minimize the impact of these issues and the disruption that customers using these versions of Windows are experiencing.

'On June 17, 2021, Microsoft will stop publishing drivers for Windows 7 SP1, Windows Server 2008 and Windows Server 2008 R2 via Windows Update,' said Naim Mohammad, Technical Program Manager at Microsoft.

Microsoft stops providing Windows 7 drivers via Windows Update Picture 1

However, signed drivers will still be available to enterprise customers under the Extended Security Update (ESU) Program to ensure optimal driver reliability.

"If your organization uses ESU, you'll be able to continue to deploy drivers to devices using Windows Server Update Services that you manage and other support methods," said Mohammad.

Submissions for Windows 7 and Windows Server drivers through the Windows Hardware Compatibility Program (WHCP) will remain available until January 2023.

Starting today, Microsoft partners are required to take the following steps to sign drivers for Windows 7, Windows Server 2008, and Windows Server 2008 R2 via the Partner Center for Windows Hardware:

1. Remove the existing signature from the driver binary.
2. Create a new catalog file using INF2CAT.
3. Sign security catalog files with an IHV/OEM certificate registered with the Partner Center for Windows Hardware.
4. Add the driver to your HCK file.
5. Sign the HCK file with an IHV/OEM certificate registered with the Partner Center for Windows Hardware.
6. Send the driver package to the Partner Center for Windows Hardware for signature.
7. Download the signed driver package from the Partner Center for Windows Hardware.

"To test and certify hardware devices for Windows, we recommend using the Windows Hardware Certification Kit (Windows HCK) and following the procedure to sign updated drivers for Windows 7, Windows Server 2008, and Windows Server 2008 R2 when sending the driver package through the Partner Center for Windows Hardware," said Mohammad.

Microsoft removed all Windows downloads signed with SHA-1 certificates from the Microsoft Download Center on August 3, 2020.

Micah Soto

Update 18 June 2021