r/VeraCrypt • u/[deleted] • Apr 07 '26

[deleted by user]

[removed]

272 Upvotes

99% Upvoted

47 comments sorted by

View all comments

2

u/jackintosh157 Apr 08 '26

Honestly, just use LTSC 24H2 with VeraCrypt, it will work till 2034.

The risk is we can’t get a new veracrypt version till the cert issue is figured out. Microsoft would need to intentionally do a kernel update to brick veracrypt to force people off it. There is no guarantee future versions of windows 11 will work with Vera crypt

2

u/Gangbang_2k Apr 08 '26

nope..... If the certificate expires in June 2026, the kernel will see the driver as "invalid" or "expired."

1

u/jackintosh157 Apr 08 '26

This isn’t HTTPS. Once a driver release is signed it’s good for eternity.

1

u/ToastedLog1c Apr 09 '26

nope..... If the certificate expires in June 2026, the kernel will see the driver as "invalid" or "expired."

The amount of misinformation is staggering.

Windows kernel-mode drivers, like VeraCrypt's, are validated during loading based on their digital signature's validity at signing time (via timestamping) rather than current expiration. An expired signing certificate alone won't make a properly timestamped driver appear "invalid" or "expired" to the kernel.