Microsoft is blocking legacy Windows drivers

Microsoft will stop trusting drivers signed via the cross-signed root program by default.

Only drivers approved through the Windows Hardware Compatibility Program will be allowed to load.

The change will roll out with the April 2026 Windows update and targets Windows 11 24H2, 25H2, 26H1 and Windows Server 2025.

Microsoft will provide an evaluation phase and Application Control for Business for organizations that need exceptions.