HyperVisor Code Integrity Readiness Test

==================Update on Dec 19, 2016===========================================

The errata 5792 has been extended. So you can apply this errata filter in Readme.doc file while you submit your submission.

Please check the details of errata 5792.

https://sysdev.microsoft.com/en-US/Hardware/ec/FilterDetail.aspx?id=19102

DTM Filters

Errata, contingency, and auto-triage

HyperVisor Code Integrity (HVCI) Driver Compatibility Errata

Errata detail

Filter id : 5792
Expires : 2/27/2017
Type : Errata
Issue description : Windows compatible drivers shall not dynamically allocate memory that is both executable and writable. In addition, the driver binary must have appropriate section properties, must not have sections that are executable and writable, and must have proper section alignment. This compatibility requirement is necessary for the Windows Device Guard feature. More details are here: http://blogs.msdn.com/b/windows_hardware_certification/archive/2015/05/22/driver-compatibility-with-device-guard-in-windows-10.aspx.
The job is currently attributed to run on 32bit which it is not applicable for, additionally if the job is expecting to be ran with the system under test connected to a kernel debugger. If running the job without a kernel debugger and the job hits a bluescreen the filter will not work. In these cases its still acceptable to submit but will require the errata to be listed in the readme.
Resolution description : The enforcement of this test has been delayed.
Features :
Operating system : Windows v10.0 Client arm64
Windows v10.0 Client x64
Windows v10.0 Client x64 TH1 Full
Windows v10.0 Client x64 TH2 Full
Windows v10.0 Client x86
Windows v10.0 Client x86 TH1 Full
Windows v10.0 Client x86 TH2 Full

===================================Old Content=======================================
https://sysdev.microsoft.com/en-US/Hardware/ec/FilterDetail.aspx?id=6617

Filter id : 5792
Expires : 9/15/2016
Type : Errata

LOG EXCERPT
======================================
Any failure in this test is waived until the required date.

SOLUTION
======================================
This issue described is an acceptable failure. When making a submission with a failed log for this test, refer to this issue with the Errata ID number in the Readme.doc file included with your test submission package.

Please update your HLK filters again. A new update to filter 5792 has been released. Also, please connect a kernel debugger to your system under test, and run the test again.

AUTOMATICLLY FILTER
======================================

You will probably find that the kernel debugger catches a bugcheck related to the HyperVisor Code Integrity feature. Once this occurs, disable Driver Verifier (enabled by the test) by entering ‘!verifier -disable’ on the kernel debugger command line, and follow the displayed instructions.

This should allow the test to complete, and the failing result should be filtered to a Pass (by filter 5792, but only until HyperVisor Code Integrity compliance is required in 2016).

此条目发表在Uncategorized分类目录。将固定链接加入收藏夹。

发表评论

Fill in your details below or click an icon to log in:

WordPress.com 徽标

您正在使用您的 WordPress.com 账号评论。 注销 /  更改 )

Google photo

您正在使用您的 Google 账号评论。 注销 /  更改 )

Twitter picture

您正在使用您的 Twitter 账号评论。 注销 /  更改 )

Facebook photo

您正在使用您的 Facebook 账号评论。 注销 /  更改 )

Connecting to %s