Is `PnpLockdown = 1` mandatory for minifilterdriver signing?

NTFSD
1

Hi All,

I may have missed something, but is specifying PnpLockdown=1 now mandatory for signing a minifilter driver? I started seeing the error message since May 13rd but never saw this before.

Error 1324 in xxx.Inf, line 3 : [Version] section should specify PnpLockdown=1 to prevent external apps from modifying installed driver files.

Failed INF validation. INF did not pass Desktop validation.

Thanks

2

I thought it was mandatory for years now.
Had it for quite a few in my INFs, due to this.

3

If you set your target platform to Universal instead of Desktop then this should just be a warning instead of an error (Project Properties->Driver Settings->Target Platform).

Though setting PnpLockdown is generally just good hygiene at this point.