FacebookTwitterLinkedIn

How To Disable Driver Signature Enforcement?

How To Easily Disable Driver Signature Enforcement On Windows 10?

Microsoft has included a feature called Driver Signature Enforcement on Windows operating systems. When installing drivers on your computer, some might work properly and others might not. The Driver Signature Enforcement feature ensures that Windows can only load drivers that have been 'signed' by Microsoft. The installed driver must be a signed driver that includes a digital signature - an electronic security mark that details the publisher of the driver and all related information (for example, if the original contents of the driver package have been changed). All drivers and system files must be digitally verified by Microsoft and, furthermore, Windows will not run unsigned drivers on either 32-bit or 64-bit systems. This whole philosophy is called “driver signature enforcement”.

If a driver is not certified or signed by Microsoft, you will receive a message such as "Driver has been altered", "Windows cannot install this driver", or another similar notification. Many programs use driver files that do not have digital signature authentication - these could be unofficial drivers, outdated drivers, or those developed by yourself or other individuals. To receive verified certificates, manufacturers and developers must pay Microsoft. This makes many drivers unavailable within Windows. To install unsigned drivers on your computer and make them work properly, you must disable driver signature enforcement.

Driver Signature Enforcement is designed to achieve maximum security and it is a good feature, however, there may be times when you need to install drivers not digitally signed by Microsoft. This feature will prevent you from doing so. Fortunately, you can disable Driver Signature Enforcement, and in this article we show how.

disable driver signature enforcement

Table of Contents:

Disable Driver Signature Enforcement Feature Using Command Prompt

Command Prompt is the input field in a text-based user interface screen, a command line interpreter application available in most Windows operating systems. It is used to execute commands entered via the keyboard. Most of these commands are used to automate tasks through scripts and batch files, perform advanced administrative functions, troubleshoot, and solve certain types of Windows issues. In the early days of computing, Command prompt was the only way to interact with the computer, so a simplistic set of commands with rigid syntax was created to perform system many functions. Command Prompt's official name is Windows Command Processor, but is also sometimes called ​the command shell or cmd prompt, or even referred to by its filename, cmd.exe. To use Command Prompt, you must enter a valid command along with any optional parameters. When executed, the command performs whatever task or function you require in Windows. Some commands available in Windows require that you run them from an elevated Command Prompt. This means that you have to run them with administrator level privileges.

This solution is a permanent one, so make sure that you want to disable the Driver Signature Enforcement feature for good. To run Command Prompt as administrator, type "command prompt" in Search and right-click the "Command Prompt" result. Select "Run as administrator" from the drop-down menu to run Command Prompt with administrator privileges.

disable driver signature enforcement using command prompt step 1

When Command Prompt is open, type this command: "bcdedit.exe /set nointegritychecks on" and press Enter execute it.

disable driver signature enforcement using command prompt step 2

If you want to re-enable the Driver Signature Enforcement feature, open Command Prompt as administrator and type this command: "bcdedit.exe /set nointegritychecks off". This is essentially the same command as before, except that the last word is changed from "on" to "off".

Another way to disable the Driver Signature Enforcement feature via Command Prompt is to open Command Prompt as administrator and type the following commands: "bcdedit.exe -set loadoptions DISABLE_INTEGRITY_CHECKS". Press Enter to excetute.

disable driver signature enforcement using command prompt step 3

Then, enter this command: "bcdedit.exe -set TESTSIGNING ON" and press Enter.

naujas 4a

Close Command Prompt and restart your computer for the changes to take effect.

To re-enable Driver Signature Enforcement, repeat the steps by changing the first command to "bcdedit -set loadoptions ENABLE_INTEGRITY_CHECKS", and the second command to "bcdedit -set TESTSIGNING OFF". After completing these steps, restart your computer for the changes to take effect.

[Back to Table of Contents]

Disable Driver Signature Enforcement Feature Using Automatic Repair

Automatic Repair is an built-in troubleshooter, which should help to fix the most common computer issues. It is a system recovery tool that automates common diagnostic and repair tasks of unbootable Windows 10 installations. In this case, we are will use the Startup Settings option to disable the Driver Signature Enforcement Feature.

Bear in mind that this method disables Driver Signature Enforcement temporarily - it will be re-enabled the next time you start Windows. To temporarily disable Driver Signature Enforcement, click the Power button and then click "Restart" while holding the Shift key. This will restart your computer and open the Automatic Repair screen.

disable driver signature enforcement using automatic repair step 1

In the Automatic Repair blue screen, click "Troubleshoot".

disable driver signature enforcement using automatic repair step 2

In Troubleshoot, click "Advanced Options".

disable driver signature enforcement using automatic repair step 3

In Advanced options, select "Startup Settings".

disable driver signature enforcement using automatic repair step 4

In Startup settings, click "Restart". This will restart your computer so you can change Windows options.

disable driver signature enforcement using automatic repair step 5

Now press number 7 or F7 and this will start Windows with the option to disable Driver Signature Enforcement.

disable driver signature enforcement using automatic repair step 6

Now you can install the unsigned drivers, until the next restart. We hope that this guide was helpful and that you were able to disable Driver Signature Enforcement.

Video Showing How To Disable Driver Signature Enforcement:

[Back to Top]

 

Click to post a comment

About the author:

Tomas Meskauskas

I am passionate about computer security and technology. I have an experience of 10 years working in various companies related to computer technical issue solving and Internet security. I have been working as an editor for pcrisk.com since 2010. Follow me on Twitter to stay informed about the latest tech news or online security threats. Contact Tomas Meskauskas.

Our guides are free. However, if you want to support us you can send us a donation.

About PCrisk

PCrisk logo

PCrisk is a cyber security portal, informing Internet users about the latest digital threats. Our content is provided by security experts and professional malware researchers. Read more about us.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.