Code Signing for Protected Media Components in Windows Vista

Updated: August 25, 2006

File name: pmp-sign.doc
423 KB
Microsoft Word file
Get Office File Viewers

Download

About This Download

Microsoft Windows Vista enables the playback of next-generation premium content such as HD-DVD and other formats protected under the AACS standard. To ensure access to this new content, Windows Vista systems must support the requirements that are defined by the premium-content owners. A key requirement is code signing, which helps ensure great consumer experiences by providing increased driver reliability and increased security against malware.

System and device manufacturers must follow new code-signing requirements for modules that support playback of premium content on Microsoft Windows Vista. These requirements include:

• To help ISVs determine how to handle playback of next-generation premium content, Windows Vista exposes a list of the unsigned drivers on the system. It is up to the ISV to determine whether to enable playback.

• The driver and application components that make up the Windows Vista Protected Media Path (PMP) - including user-mode components - must be signed for the PMP to ensure access to premium content.

• Display device drivers must include an embedded certificate that verifies a robust pipeline throughout the video processing engine.

This paper provides information for hardware manufacturers and software vendors about the code-signing requirements for playing premium content in Windows Vista.

Included in this paper:

• The PMP and Output Protection

• Code-Signing Requirements for PMP Components

• How to Obtain Certificates

• Best Practices for Code Signing PMP Components

• Understanding the User Experience with Premium Content