How to enable digital drivers. Disabling digital signature of Windows drivers

Youtube

Let's look at how to disable checking digital signatures of drivers. If you try to install a file without such a signature, errors may occur or the system may refuse to install.

The only way to solve the problem is to disable the function.

To find where the digital signature settings window is located in your operating system, follow the instructions that apply to your operating system.

After deactivating the option, you can easily install any programs and libraries that do not have a signature ID.

Content:

Why is a driver digitally signed?

A digital signature is a so-called mark on a file or library that guarantees its security.

It is necessary so that the user can find out about the origin and developer of the application.

Also, the signature is checked itself at the initial stage of installation of any executable file.

If this attribute is missing or certain errors are found in it, the installation will not start and the user will be notified possible danger which can result from using an unidentified program.

The digital signature is displayed in a pop-up window as soon as the user starts installing the executable file.

In this window, you must give the OS additional permission to run the installation wizard. Here you can see the name of the certificate.

It is indicated after the program name. The figure below shows an example of window display User Account Control , in which the application's digital signature is the Publisher field.

The digital signature is embedded not only in standard applications and system libraries. It can also be found in driver software.

A driver is a program that is responsible for configuring the operation of PC hardware components and devices connected to it (video card, mouse, keyboard, printer, microphone, etc.).

Because of this, even a driver with an official digital signature may be identified as a potential security threat to your PC.

64-bit versions of the OS immediately block installation and delete the application file if the digital signature is not detected.

The window that appears Windows errors may display one of the following problems:

“No driver signature”;
“The system cannot verify the program manufacturer”;
"Windows requires a digitally signed driver."

Rice. 2 – example of an error window Windows Security

Most easy option The solution to the problem is to disable digital signature verification.

The process for setting this setting may vary depending on the .

Before disabling this feature, the user must be aware of all possible threats to the operating system and computer.

The system may not recognize the signature due to its forgery or unsafe content. In most cases, it's best to avoid using apps without a digital ID.

Disabling the function in Windows 7

In Windows 7, the system Group Policy Editor is responsible for the option to enable/disable signature verification. Its window can be opened using the command line.

Follow the instructions:

Open the Run window by pressing the Win and R buttons simultaneously;
Enter the command shown in the figure and click OK;

Rice. 3 – command to open a window with a Windows policy group

In the window that appears, open the tab "User Configuration". Then click on the item "Administrative Templates". In the “System” tab, click on the option "Driver Installation";
On the right side of the window, select "Digital signature of devices";

Rice. 4 – “Driver Installation” tab in the window group policy OS

Disable ID verification in the new window and save your changes.

Rice. 5 – disable scanning for Windows 7

Instructions for Windows 8 and 8.1

Enter the gpedit.msc command in the Run window to open the Settings window or enable the Policy Editor through the Control Panel. Next do the following actions:

On the left side of the window, go to the "System" directory, as shown in the figure below, and go to the policies folder. On the right side of the system window, click on the item "Digital signature" right mouse button.

Rice. 6 – check option status

Click on "Edit" ;
In the new window, select the “Enabled” option, and then set the “Options” column to “Skip”;
Click OK and exit the Group Policy Editor.

Now, even after rebooting the operating system, checking for a digital signature will not be enabled.

To enable the function, you must go to again. system window editor and configure the verification parameter.

Rice. 7 – disable scanning in Windows 8 and 8.1

Another way to disable the function is to use the command line. You can disable the option by entering one simple command.

Go to the Run window and launch Command Line with cmd lines:

Rice. 8 – command to activate the line

In the window that opens, enter the command shown in the figure below. For restart options change the identifier OFF to ON.

Rice. 9 – command to disable signature verification

Instructions for Windows 10

Most of the functions and parameters of the new one are similar to the eighth version of the system.

Disabling the option to constantly check digital driver IDs can be done in the Group Policy window:

Go to the editor as shown in the instructions for Windows 8;
Open the window for enabling/disabling signature verification;
Select "Disabled";
Leave the field empty in the parameters column;
Save your changes.

Rice. 10 – disable the option in Windows 10

If there is no null (empty) value in the drop-down list, select “Skip”. To deactivate using the command line, you need to use two commands.

The first is for loading options, the second is for disabling the function. Both commands and the order in which they are executed are shown in the figure below:

Rice. 11 – Disable using Command Line in Windows 10

Disabling Windows Defender

Newer versions of Windows OS (8.1 and 10) have, which also checks the security level of any executable file.

Sometimes, simply disabling digital signature verification may not be enough, because Defender may identify the file as dangerous.

In this case, it will be immediately deleted or quarantined (depending on the defender settings).

Fig. 12 – main window Windows Defender

If, after disabling driver signature verification, a system window appears about unsafe content in a file, you must disable the service to continue installing it Windows Defender.

Follow the instructions:

Open a Windows Defender window;
Check the utility's operating status, and then click on the "Options" tab;
You will be redirected to Windows System Settings. In it you need to disable the real-time protection and cloud protection options.

Fig. 13 - shutdown Windows protection

Installing drivers without a digital signature should only be done if you are absolutely sure that the file is safe.

For example, if you are a developer and have created an application that does not yet have a signature.

The installation file is reliable if you downloaded it from the developer's site. Often latest versions drivers may be incorrectly detected by the digital signature verification server.

This indicates that the developer has not yet entered the identifier data into the system or that work on improving the driver is still active.

In this case, disabling signature verification and protector will not cause any damage to the installed operating system.

– Igor (Administrator)

As part of this note, I will tell you how to disable driver digital signature verification in Windows 7 using several methods.

Sometimes when installing any drivers or programs with drivers, operating system Windows pauses the installer and asks the user whether to continue installing the driver without a digital signature. Of course, for security purposes this is very good decision. However, if we're talking about about programs that take 30 minutes to install, then this can be unpleasant (they turned it on, went away to drink tea, returned, and there was a window and 1% of the installation). In addition, if you do not select anything for a long time, the installer may freeze and you have to install the program again.

To prevent this from happening, let's consider this issue in more detail.

What is digital signature of drivers and why is it needed?

Digital signature of drivers is a special digital tag that allows the operating room Windows system determine whether the driver is correct, that is, whether it has been modified by intruders. This signature allows you to verify data such as the integrity of the driver (using a hash), the driver version, its author, and others. Thus, if there is a virus inside the driver, it will be quickly detected by the system.

Note: If you are interested in learning more about digital signatures, here is an overview.

What is the main danger of unsigned drivers? The fact is that drivers are launched with maximum rights and therefore can perform almost everything in the operating system. Thus, if such a driver contains a virus, it will be much more difficult for antiviruses to remove it, especially if we are talking about a rootkit or Trojan.

Therefore, I strongly recommend that you think about whether to disable this check. However, not all drivers are digitally signed, and this is not always due to viruses (for example, drivers for some specific devices).

Disable driver digital signature verification in Windows 7

Disable driver digital signature verification using Group Policy:

1. Open the Start menu.

2. In the search bar, write "gpedit.msc" (without quotes) and press enter.

3. In the window that appears on the left side, first expand “User Configuration”, then “Administrative Templates”, then “System”, then select “Driver Installation”.

4. In the right part of the window, find “Digital signature of device drivers” and double-click on it with the left mouse button (or first right click mouse, and then select in the appeared context menu"Change").

5. A small window will open, where in the upper left part you need to select “Disable” and click OK.

6. Restart your computer.

7. Driver signature verification is disabled in Windows 7.

Note: To enable, you need to do all the steps, but in the 5th, select “Enable”.

Disable signature verification using the command line:

2. Enter the following command:

bcdedit.exe /set nointegritychecks ON

3. Press enter and restart your computer.

Note: If you need to return the check back, then instead of ON, you need to write OFF.

Note: For convenience, you can use the methods from the note How to paste text into the Windows command line.

Disable signature verification using the command line (second option):

1. Open a command prompt as an administrator.

2. Enter the following command:

bcdedit.exe -set loadoptions DDISABLE_INTEGRITY_CHECKS

3. Press enter.

4. Enter the following command:

bcdedit.exe -set TESTSIGNING ON

5. Press enter and restart your computer.

Note: If you need to turn the check back on, then instead of DDISABLE_INTEGRITY_CHECKS you need to specify ENABLE_INTEGRITY_CHECKS, and instead of ON, you need to write OFF.

Sometimes the operating system blocks the installation of drivers if they do not have a digital signature. In Windows 7, this situation occurs especially often on 64-bit OSes. Let's figure out how to disable digital signature verification if necessary.

It should be noted right away that by deactivating digital signature verification, you act at your own peril and risk. The fact is that unknown drivers can be a source of vulnerability or direct danger if they are the product of attackers. Therefore, we do not recommend removing protection when installing objects downloaded from the Internet, as this is very risky.

At the same time, there are situations when you are confident in the authenticity of the drivers (for example, when they are supplied with equipment on disk drive), but for some reason they lack a digital signature. It is for such cases that it is worth using the methods described below.

Method 1: Switch to download mode with deactivation of mandatory signature verification

To deactivate driver signature verification when installing them on Windows 7, you can boot the OS in a special mode.

Flaw this method is that the next time you start your computer in normal mode, All installed drivers without digital signatures, they will immediately fly off. This option is only suitable for a one-time connection, unless you plan to use the device regularly.

Method 2: "Command Line"

You can disable digital signature verification by entering commands in "Command line" operating system.

Click "Start". Go to "All programs".

Click "Standard".

In the directory that opens, look for "Command line". By clicking on the specified element with the right mouse button ( RMB), select a position "Run as administrator" in the displayed list.

Activated "Command line", in which you need to enter the following:
bcdedit.exe -set loadoptions DDISABLE_INTEGRITY_CHECKS

Click Enter.

After information appears indicating the successful completion of the task, enter the following expression:
bcdedit.exe -set TESTSIGNING ON

Apply again Enter.

Signature verification is now disabled.

For her reactivation enter:
bcdedit -set loadoptions ENABLE_INTEGRITY_CHECKS

Apply by pressing Enter.

Then enter:
bcdedit -set TESTSIGNING ON

Press again Enter.

Signature verification is enabled again.

There is another option through "Command line". Unlike the previous one, it only requires entering one command.

Method 3: "Group Policy Editor"

Another option for deactivating signature verification is carried out by manipulation in "Group Policy Editor". True, it is available only in the “Corporate”, “Professional” and “Maximum” editions, but for the “Home Basic”, “Beginner” and “Home Advanced” editions this algorithm for performing the task is not suitable, since they lack the necessary functionality.

To activate the tool we need, we will use the shell "Run". Click Win+R. In the field of the displayed form, enter:
Click "OK".

The tool necessary for our purposes is launched. In the central part of the window that opens, click on the position "User Configuration".

Next click "Administrative Templates".

Now enter the directory "System".

Then open the object "Driver Installation".

Now click on the title "Digital signature of drivers...".

The configuration window for the above component opens. Set the radio button to position "Disable", and then press "Apply" And "OK".

Now close everything open windows and programs, then click "Start". Click on the triangular shape to the right of the button "Shutdown". Choose.

The computer will be restarted, after which signature verification will be disabled.

Method 4: "Registry Editor"

The following method of solving the given task is carried out through "Registry Editor".

Dial Win+R. Enter:
Click "OK".

The shell is activated "Registry Editor". In the left area of the shell, click on the object "HKEY_CURRENT_USER".

Next, go to the catalog "Software".

A very long list of sections, arranged in alphabetical order, will open. Find the name among the elements "Politics" and click on it.

Next, click on the catalog name "Microsoft" RMB. In the context menu, select "Create" and in additional list choose an option "Chapter".

Displayed new folder with an active field for the name. Enter this name there - "Driver Signing"(without quotes). Click Enter.

After that click RMB by the name of the newly created section. Click on an item in the list "Create". Select an option from the additional list "DWORD 32 bit parameter". Moreover, this position should be selected regardless of whether your system is 32-bit or 64-bit.

Now the right side of the window will display new parameter. Click on it RMB. Choose "Rename".

After this, the parameter name will become active. Enter the following instead of the current name:
BehaviorOnFailedVerify

Click Enter.

After this, make double click left mouse click on this element.

The properties window opens. It is necessary to check that the radio button in the block "Number system" stood in position "Hexadecimal", and in the field "Meaning" the figure was set «0» . If all this is true, then just click "OK". If in the properties window any of the elements do not correspond to the above description, then you need to make the settings that were mentioned, and only then click "OK".

Now close "Registry Editor" by pressing standard icon close the window and restart your PC. After the restart procedure, signature verification will be deactivated.

In Windows 7, there are several methods for deactivating driver signature verification. Unfortunately, only the option of turning on the computer in a special startup mode is guaranteed to provide desired result. Although it also has some limitations, which are expressed in the fact that after starting the PC in normal mode, all installed unsigned drivers will be lost. Other methods may not work on all computers. Their performance depends on the OS edition and installed updates. Therefore, you may have to try several options before you get the expected result.

Sometimes problems can arise when installing absolutely any driver. One of them is the problem with checking the digital signature of the driver. The fact is that by default you can install only software that has a signature. Moreover, this signature must be verified. by Microsoft and have the appropriate certificate. If such a signature is missing, the system simply will not allow such software to be installed. In this article we will tell you how to bypass this limitation.

How to install a driver without a digital signature

In some cases, even the most trusted driver may not be properly signed. But this does not mean that the software is malicious or bad. Most often people suffer from digital signature problems Windows owners 7. In subsequent versions of the OS this question arises much less frequently. You can identify a problem with a signature by the following symptoms:

1. While installing the drivers, you may see a message box as shown in the screenshot below.

It states that the driver being installed does not have an appropriate and verified signature. In fact, you can click on the second inscription in the error window« Install this driver software anyway» . This way you will try to install the software, ignoring the warning. But in most cases, the driver will not be installed correctly and the device will not function properly.

2. B « Device Manager» You may also find equipment whose drivers could not be installed due to a missing signature. Such equipment is identified correctly, but is marked with a yellow triangle with an exclamation point.

In addition, error code 52 will be mentioned in the description of such a device.

3. One of the symptoms of the problem described above may be the appearance of an error in the tray. It also indicates that the hardware software could not be installed correctly.

All the problems and errors described above can be corrected only by disabling the mandatory check for a digital signature on the driver. We offer you several ways to help you cope with this task.

Method 1: Temporarily disable scanning

For your convenience, we will divide this method into two parts. In the first case, we will tell you how to use this method, if you have Windows 7 or lower. The second option is suitable only for owners of Windows 8, 8.1 and 10.

If you have Windows 7 or lower

1. Reboot the system in absolutely any way.
2. During the reboot, press the F8 button to display a window with a choice of boot mode.
3. In the window that appears, select the line« Disabling mandatory driver signature verification» or « Disable Driver Signature Enforcement» and press the button " Enter» .

4. This will boot the system with driver signature checking temporarily disabled. Now all that remains is to install the necessary software.

If you have Windows 8, 8.1 or 10

1. Reboot the system by first holding down the “ Shift" on keyboard.

2. We wait until the window with the choice of action appears before turning off the computer or laptop. In this window, select the item “ Diagnostics».

3. In the next diagnostic window, select the line “ Extra options».

4. The next step is to select the item “ Boot Options».

5. In the next window you do not need to select anything. You just need to press the button Reboot».

6. The system will begin to reboot. As a result, you will see a window in which you need to select the download options we need. In it you need to press the F7 key to select the line “ Disable mandatory driver signature verification».

7. As in the case of Windows 7, the system will boot with the signature verification service of the installed software temporarily disabled. You can install the driver you need.

No matter what operating system you have, this method has disadvantages. After the next system reboot, signature verification will start again. In some cases, this can lead to blocking the operation of drivers that were installed without the appropriate signatures. If this happens, you should disable the scan permanently. The following methods will help you with this.

Method 2: Group Policy Editor

This method will allow you to disable signature verification forever (or until you activate it yourself). After this, you can safely install and use software that does not have the appropriate certificate. In any case, this process can be reversed and signature verification can be turned back on. So you have nothing to fear. In addition, this the method will work owners of any OS.

1. Press the “” keys on the keyboard at the same time Windows" And " R" The program will start " Execute" Enter the code in a single line

gpedit.msc

Don’t forget to press the button after this. OK" or " Enter».

2. This will open the Group Policy Editor. On the left side of the window there will be a tree with configurations. You need to select the line " User Configuration" In the list that opens, double-click on the folder “ Administrative Templates».

3. In the tree that opens, open the section “ System" Next, open the contents of the folder “ Driver installation».

4. This folder contains three files by default. We are interested in a file called " Digitally signing device drivers" Double-click on this file.

5. On the left side of the window that opens, you must check the box next to the line “ Disabled" After that, don't forget to click " OK" in the lower area of the window. This will allow the new settings to be applied.

6. As a result, mandatory verification will be disabled and you will be able to install the software without a signature. If necessary, in the same window you just need to check the box next to the line “ Included».

Method 3: Command Line

This method is very easy to use, but has its drawbacks, which we will discuss at the end.

1. Launch " Command line" To do this, press the key combination “ Win" And " R" In the window that opens, enter the command

cmd

2. Please note that all methods that allow you to open “ Command line» in Windows 10, are described in our separate lesson.

3. In " Command line » must be entered one by one following commands by pressing " Enter" after each of them.

bcdedit.exe -set loadoptions DISABLE_INTEGRITY_CHECKS

4. As a result, you should get the following picture.

5. To complete, you only need to reboot the system in any way known to you. After this, signature verification will be disabled. The disadvantage that we talked about at the beginning of this method is the inclusion test mode systems. It is practically no different from usual. True, in the lower right corner you will constantly see the corresponding inscription.

6. If in the future you need to enable signature verification back, you only need to replace the parameter “ ON" in line

bcdedit.exe -set TESTSIGNING ON

To the parameter " OFF" After this, reboot the system again.

Please note that this method sometimes has to be done in safe mode. You can learn how to start the system in safe mode using our special lesson.

By using one of the suggested methods, you will get rid of the installation problem third party drivers.

Sometimes problems can arise when installing absolutely any driver. One of them is the problem with checking the digital signature of the driver. The fact is that by default you can install only software that has a signature. Moreover, this signature must be verified by Microsoft and have an appropriate certificate. If such a signature is missing, the system simply will not allow such software to be installed. In this article we will tell you how to bypass this limitation.

In some cases, even the most trusted driver may not be properly signed. But this does not mean that the software is malicious or bad. Most often, owners of Windows 7 suffer from problems with digital signatures. In subsequent versions of the OS, this issue arises much less frequently. You can identify a problem with a signature by the following symptoms:

All the problems and errors described above can be corrected only by disabling the mandatory check for a digital signature on the driver. We offer you several ways to help you cope with this task.