Microsoft’s Revocation of the Verisign Class 3 Public Primary G5 Root Cert

Re:Microsoft’s Revocation of the Verisign Class 3 Public Pri... by CamperBob2 on Thursday August 24, 2023 @03:04PM (#37253151)

Interesting. If I understand correctly, this will render some hardware whose drivers were signed with that certificate unusable. Very expensive, hard-to-replace hardware in my company's case.

Nobody seems to be talking about an outrageous act of value destruction on Microsoft's part, so maybe I'm interpreting it wrong.

[ Parent | on HN ]

Re:Microsoft’s Revocation of the Verisign Class 3 Public Pri... by deceptionatd on Thursday August 24, 2023 @03:56PM (#37253776)

This Reddit thread has a script with a workaround: https://www.reddit.com/r/sysadmin/comments/15ysxgs/applicati...

There are comments saying it's worked on several Quickbooks integrations.

Regarding hardware drivers, I _think_ the same fundamental process of removing signatures should work, but you'll get a UAC prompt to force installation of an unsigned driver.

I'm not as familiar with driver signature enforcement though, so take that with a grain of salt.

P.S: I still have running XP installs for some $300k industrial hardware. It could be worse...

[ Parent | on HN ]

Re:Microsoft’s Revocation of the Verisign Class 3 Public Pri... by shartte on Thursday August 24, 2023 @04:56PM (#37254442)

Hashes of known good drivers should be whitelisted explicitly if they are known to have been signed correctly before revocation. Direct trust should trump a PKI here.

[ Parent | on HN ]