If you receive Windows requires a Digitally Signed Driver message, then this post will show you how to disable Driver Signature enforcement permanently via Advanced Startup Options or CMD in Windows 11/10. This will allow you to install Unsigned Drivers. Driver Signing is the process of associating a digital signature with a driver package.
Driver Signing is the process of associating a digital signature with a driver package. Windows device installations use digital signatures to verify the integrity of the driver packages and to verify the identity of the vendor who provides the driver packages.
The drivers you normally install on your computer from Windows Update, Original Equipment Manufacturers, or some 3th-party driver download software, etc. must be digitally verified by Microsoft via a digital signature. It is an electronic security mark that certifies the publisher for the driver, as well as all the relevant information related to it. If a driver isn’t certified by Microsoft, Window won’t run them on either 32-bit or 64-bit system. This is referred to as “driver signature enforcement”.
Windows requires a Digitally Signed Driver
Windows 11/10 will load only Kernel-mode drivers signed digitally by the Dev Portal. However, the changes will affect only the new installations of the operating system with Secure Boot on. The non-upgraded fresh installations would require drivers signed by Microsoft. At times you may receive a message – Windows requires a Digitally Signed Driver. If you wish you can disable Driver Signature enforcement. Let us see how to do it.
Disable Driver Signature Enforcement on Windows 11/10
There are three options available to you-
- Use Advanced Boot Menu
- Enable Test Signing Mode
- Disable Device Driver Signing.
How to Install Unsigned Drivers in Windows 11/10
1] Use Advanced Boot Menu
Hold down the Shift key while choosing the “Restart” option in Windows. Your computer will restart with Advanced Options. From the list of options displayed, select the “Troubleshoot” tile.
Next, select “Advanced options” and hit the “Startup Settings” tile.
Next, select the “Restart” button to restart your PC on the Startup Settings screen.
You will see the following screen on restart. Press the 7 keyboard key to activate the “Disable driver signature enforcement” option.
Once done, your PC will reboot with driver signature enforcement disabled, and you’ll be able to install unsigned drivers.
Having said that, the next time you restart your computer, driver signature enforcement will be disabled.
2] Disable Device Driver Signing
Run Command Prompt as Administrator and execute the following command:
bcdedit.exe /set nointegritychecks on
This will automatically disable driver signature enforcement on your device.
If you wish to enable this feature back again, you need to execute the following command in an elevated cmd window:
bcdedit.exe /set nointegritychecks off
To be able to do this, Secure Boot Policy will have to be disabled.
If you decide to exit this mode, run the following command:
bcdedit /set testsigning off
Hope this works for you.
3] Enable Test Signing Mode
Enabling the first option will disable the driver signature enforcement feature successfully until you choose to leave the Test Mode. To enable this option, you will have to open Command Prompt with administrative privileges. For this, type CMD in the search box, right-clickCommand Prompt’, and select ‘Run as administrator’ option.
Next, paste the following command into the Command Prompt window and press Enter:
bcdedit /set testsigning on
If a message is displayed on the screen reading “The value is protected by Secure Boot policy”, it means Secure Boot is enabled for your computer’s UEFI firmware.
Disable it in your computer’s UEFI Firmware Settings to enable test signing mode via Advanced Startup Options.
Restart your computer to enter test mode. A “Test Mode” watermark should be visible in the bottom right corner of your computer screen. When you see this, it indicates no restriction for installing unsigned or not verified drivers.
You need to know that Driver Signing is a security feature that protects your system and you should consider re-enabling it as soon as it is possible.
How to find unsigned drivers in Windows?
Windows computers come with a built-in tool that helps you find all the unsigned drivers. This tool is File Signature Verification Tool. You can run it using the sigverif command in the Run command box. Unsigned drivers may be malware and they may cause damage to your system. Therefore, it is important to check if an unsigned driver is installed on your system or not.
What is Disable Driver Signature?
Driver Signature Enforcement is a security feature in Windows computers. It ensures that only signed drivers are loaded at system startup. Disabling this feature will allow you to install unsigned drivers, which can threaten your system. Hence, it is advised not to disable this feature.
