A clean install of the Aniversary build of Windows 10 also known as build 1607 or Inisder build 14393 will not allow the drivers of CIS to be installed because they are not digitally signed. People upgrading from a previous build of Windows 10 are not affected.
I am quoting an article on ghacks Windows 10 Version 1607 driver signing changes:
Microsoft announced recently that the upcoming version 1607 of Windows 10, known as the Anniversary Update, will only load kernel mode drivers that are digitally signed by Microsoft.The change won’t affect all systems however the company notes, as only new installations are affected in the beginning.
Starting with new installations of Windows 10, version 1607, the previously defined driver signing rules will be enforced by the Operating System, and Windows 10, version 1607 will not load any new kernel mode drivers which are not signed by the Dev Portal.The list of exceptions to the new policy is long. Below is the most important information in regards to the new kernel mode drivers policy:
- PCs upgraded to Windows 10 Build 1607 from a previous version of Windows (for instance Windows 10 version 1511) are not affected by the change.
- PCs without Secure Boot functionality, or Secure Boot off, are not affected either.
- All drivers signed with cross-signing certificates that were issued prior to July 29, 2015 will continue to work.
- Boot drivers won’t be blocked to prevent systems from failing to boot. They will be removed by the Program Compatibility Assistant however.
- The change affects only Windows 10 Version 1607. All previous versions of Windows are not affected.
In short, people doing an upgrade installation are not affected but people doing a clean install will be.
For now I see only two workarounds until Comodo gets the drivers digitally signed by Microsoft:
- Disable Secure Boot in BIOS or UEFI. I don’t know what the security implications of this
- Disable Signed Driver Enforcement. This needs to be done each time the computer boots. That’s a serious disadvantage. There is a security risk when you would get infected by a malware that uses a driver. Then disabling will activate the malware.