>Q. What is the expiration schedule of the trusted cross-certificates?
>Q. Is there a way to run production driver packages without exposing it to Microsoft?
>A. No, all production driver packages must be submitted to, and signed by Microsoft.
>Q. Does every new Production version of a driver package need to be signed by Microsoft?
>A. Yes, every time a Production level driver package is rebuilt, it must be signed by Microsoft.
>Q. Starting in 2021, will Microsoft be the sole provider of production kernel mode code signatures?
>Q. What will happen to my existing signed driver packages?
>A. As long as driver packages are timestamped before the expiration date of the intermediate certificate, they will continue working.