Version 3 (modified by 5 years ago) (diff) | ,
---|
Introduction
Different Windows versions have different kernel-mode signing options:
- Windows 7/8/8.1/Server 2012r2
- Cross-signing
- WHQL-certified (HCR)
- Windows 10 desktop
- Attestation signing
- WHQL-certified (HLK)
- Windows Server 2016/2019
- WHQL-certified (HLK)
According to practical testing done by wintun developers it is possible to cover all Windows 10 platforms with the following HLK setup:
- HLK controller: Windows Server 2016
- HLK clients
- Windows Server 2019 (64-bit)
- Windows Server 2019 core (64-bit)
- Windows 10 desktop (32-bit)
Wintun was able to pass HLK testing without any physical HLK clients. But due to its narrower scope it had to pass much fewer HLK tests (~50 in total) than tap-windows6.
HLK testing prerequisites
External links
- puppet-hlk: Puppet module for setting up HLK controllers and HLK clients
- Windows Virtual Hardware Lab Kit