Disable driver signature verification in Windows 11: A safe guide.

Learn about driver signature enforcement on Windows 11.

On Windows 11, the "Driver Signature Enforcement" feature is a core security mechanism that ensures only drivers authenticated and digitally signed by Microsoft can be installed on the system. This helps protect the computer from malware or unstable drivers that could cause serious system errors.

However, in some exceptional cases, users may need to temporarily disable this feature. Common situations include:

• Install drivers for older hardware devices that are no longer officially supported by the manufacturer.
• Using custom or unsigned drivers that are still under development.
• Troubleshoot issues related to a specific driver from a trusted source.

It's important to emphasize that disabling this protection layer can make your system more vulnerable to attacks. Therefore, this should only be done if you have complete confidence in the origin and integrity of the driver you are about to install.

Disable driver signatures via Advanced Startup Options.

This is a safe and recommended method because it only disables the signature verification feature for a single work session. The system will automatically re-enable it after the computer restarts.

1. Openadjustingon Windows 11.
2. Navigate to the itemSystemand select the tabRecovery.
3. In the “Recovery options” section, find “Advanced startup” and click the button.Restart now.



4. After the computer restarts into the Windows Recovery Environment (WinRE), selectTroubleshoot.



5. Next, selectAdvanced options.



6. SelectStartup Settings.



7. Click the buttonRestartTo restart the computer again.



8. When the Startup Settings screen appears, press the key.7orF7to select an optionDisable driver signature enforcement.

Once complete, Windows 11 will boot into normal mode, but with the signature verification feature disabled. You can then proceed to install the necessary drivers. On the next restart, the security feature will be automatically re-enabled.

Disable permanently using Group Policy Editor.

This method will permanently disable the signature verification feature and is only available on Windows 11 Pro, Enterprise, or Education editions. Please carefully consider the security risks before proceeding.

1. Open menuStarttypegpedit.mscand press Enter to open the Local Group Policy Editor.
2. Navigate to the following link:User Configuration > Administrative Templates > System > Driver Installation.



3. In the right pane, double-click on policies.Code signing for device drivers.
4. In the new window that appears, selectenabled.
5. In the “Options” section at the bottom, selectIgnorefrom the dropdown menu. This option allows the system to skip the signature check and install unsigned drivers.
6. Click hereApply, then selectOK.
7. Restart your computer for the changes to take effect.

To undo the changes, simply repeat the same steps and select the option.Not Configuredat step 4.

Important notes regarding the bcdedit command and Secure Boot.

Some older manuals may mention using commands such asbcdedit /set testsigning onin Command Prompt. However, on modern Windows 11 systems with Secure Boot enabled, using these commands often fails or may cause boot errors. Therefore, the two methods mentioned above are a more reliable and safer approach.