Permission to install unsigned drivers. Installing a driver without checking the digital signature in Windows

All tips

As you know, for correct, stable and productive operation of PC components and peripheral devices, the installation of additional software. Downloaded driver from the official website or via special applications often installs without problems. However, this only happens if its testing by Microsoft was successful. In rare cases, the certificate may be missing for some reason, causing the user to have problems installing the required driver.

As mentioned above, in most cases, all related hardware software is pre-tested by Microsoft. If the testing is successfully completed, the company adds a special certificate file, which is a digital signature. This document signifies the authenticity and safety of the driver for operating system, making installation easy.

However, not all software may have such a certificate. For example, it may be missing for a driver for old (but technically working) equipment. But there are other situations in which a new device or virtual drivers may not have a signature.

Be careful when installing an unverified driver! By disabling scanning, you jeopardize the performance of the system and the safety of your data. Install it only if you are sure of the security of the file and the source from which it was downloaded.

Moving on to the main topic of the question, I would like to note that there are 3 working options for disabling driver signature verification. One of them works until the PC is restarted, the second disables protection until the next manual activation user. Read more about each of them below.

Method 1: Windows specific boot options

Most often, the need to disable verification digital signature occurs once. In this situation, it is most logical to use a temporary permit. It will work once: until the next reboot of the computer. During this period of time, you can install any number of unverified drivers, restart the PC, and certificate verification will work as before, protecting the operating system.

First of all, start the OS in a special mode. Windows 10 users will need to follow these steps:

Run "Options", calling "Start".

The same can be done by calling the alternative RMB menu.

Open "Update and Security".

In the menu on the left, go to "Recovery", and on the right, under « Special options downloads", click "Reboot Now".

Wait for Windows to start and select the partition "Troubleshooting".

IN "Diagnostics" go to "Extra options".

Open here "Boot Options".

Check out what will be applied the next time you start the system and click "Reboot".

This mode will disable mouse control and change the screen resolution to low. The item responsible for disabling driver signature verification is seventh on the list. Accordingly, press on your keyboard F7.

A restart will begin, after which you can complete the installation.

Sequence of actions for Windows users 7 other:

Now you can start installing the software.

After next switch on The computer will start normally, and it will again begin to check the signature of the drivers that you want to install. Please note that this service does not verify installed drivers, for this you need to run separate application, which for obvious reasons does not interest us.

Method 2: Command Line

Using the well-known command line interface, the user can disable the digital signature by entering 2 commands in sequence.
This method only works with the standard BIOS interface. Owners motherboards with UEFI you will need to first disable " Secure Boot».

You can return the settings at any time by opening cmd using the method described above and entering this:

bcdedit.exe -set TESTSIGNING OFF

After that click Enter and restart your computer. Now drivers will always be checked by the operating system. Additionally, you can re-enable UEFI in the same way you disabled it.

Method 3: Local Group Policy Editor

Another option for solving this problem is editing the computer policy. It can be used by owners of Windows version higher than Home.

Run the driver that failed to install and try again.

Method 4: Create a digital signature

The methods discussed in this article do not always work. If it is impossible to disable verification, you can go the other way - create a signature manually. It is also suitable if the signature of the installed software “flies” from time to time.

We've looked at several ways to install unsigned software. Each of them is simple and accessible even for novice users. Once again it is worth recalling the unsafety of such an installation and possible errors as blue screen of death. Don't forget to create a restore point first.

We will implement such disconnections below in the text. In the meantime, let's figure out what it is - signed driver.

Such a driver is “marked” with a kind of software mark from the manufacturer. And the manufacturer, in turn, receives this right from special certification centers. Our systems “know” about such signatures and if, for example, they do not detect it in the driver, then they inform the user about this and prevent him from installing it.

They cannot establish the harmlessness of such software any other way. And they do it right. Because under the guise of useful software, a virus can enter our computer and cause trouble. The system warns us about this.

In addition to all that has been said, developers of specific programs or others of limited circulation. And also manufacturers who simply do not want to certify their software, for some reason, no matter what. They release useful, harmless applications, but without a signature. That's why Windows doesn't trust them. And he trusts, as we said, only those marked with a signature in the certification center. Where serious men sit, frown and thoroughly check every program day and night for its harmfulness. Maybe they even feed them to white laboratory rats???!!! And they are waiting for results. (Wow...))) I’ll start on the topic, today or not)

Let's go:

1) Sign the driver yourself, You can find a bunch of such programs on the Internet. You can also do this)))

2) Press F8, during booting of our system, and select - “disable_mandatory_verification_of_driver_signatures”. There is a caveat here: not in all cases, a driver installed in this way will work correctly. Since after such an installation we will boot the system in the usual way.

3) Allow during installation. During driver installation, the system will show a warning

Here you will need to select – “Install_this_driver anyway”.

It happens that after installing the driver in this way, such a warning may appear.

This means that you will see something similar in Device Manager

4) Here is another option: On the command line you need to enter gpedit.msc to launch the object editor group policy. Then go through -> User Configuration -> Administrative Templates -> System -> Driver Installation -> Digital Signature of Device Drivers -> Enabled -> Skip

5) Another way: in the command line enter bcdedit.exe /setloadoptionsDDISABLE_INTEGRITY_CHECKS then bcdedit.exe /set TESTSIGNING ON

The system will notify you as follows

Reboot and install your problematic driver.

Return everything back: bcdedit.exe /set loadoptions ENABLE_INTEGRITY_CHECKS then bcdedit.exe /set TESTSIGNING OFF

How to disable digital signature verification in Windows 8.

After you restart your computer, you will see the following message.

You see, dear friends, you didn’t even have to write anything. Everything, I think, is quite clear, we were told in the language of pictures))) how to “plug” an unsigned driver into the system.

How to disable digital signature verification in Windows 10.

Disabling in Windows 10 is very similar to the same procedure in Win 8.

Here are some screenshots

There is a clear analogy here between the same actions and the G8. But we will not limit ourselves to this method. We will achieve the same results by disabling the check in the local group policy editor. (We already did this in win 7). The same steps apply to Windows 8.

On the command line we type "gpedit.msc" and further:

Here we disable the check in any of two ways:

Or indicate “Disabled”. Or we indicate “Enabled”, but in the system action parameters if it detects such a driver. We indicate “Skip”.

Who knows what other settings are made on your system. Therefore, after the above steps, it is better to reboot. Usually, this is not necessary and our settings unsigned drivers, should work immediately.

This way, you and I can install an unsigned driver on the system.

In contact with

Owners of wonderful PCs and laptops with new ten We have already encountered the need for a driver with a digital signature in Windows 10. Microsoft has greatly tightened the system in terms of security - now you cannot install anything without a digital signature. Sometimes there is a need to disable digital signature verification Windows drivers 10. We are not looking for easy ways. Most often, we need exactly that program or device that does not have any signs of a license. How often do we download from the Internet what kind people have posted?

Attention! Remove protection carefully, as the Internet is a source of danger. You may inadvertently accept a download from the site, or it will be done behind the scenes. Then your PC will be attacked by a virus. So changing security settings can lead to disastrous consequences.

How to disable digital signing of drivers in Windows 10

There are three ways. Four actually, but the last one isn't for everyone.

Option 1 - temporary shutdown

Valid until the first reboot. This means that as soon as you turn off the computer, all settings will be removed and the operating system will return to its original state. In principle, this is enough to install in the current session. But when you turn on the computer again, the system will be protected. So, let's follow the instructions:

Click the button in the lower left corner of the screen and look for the gear icon. This opens the Computer Settings window.

Next, we need to ensure that the OS boots not in the usual way, but in a special version. Windows gives you a lot of control. Now we need the “Update and Security” item, which is responsible for protecting the system.
Find “Recovery” in the new window.
Here we will be offered, among other things, Special download options.
Do you see the "Restart" button? Click and you will see 9 ways to boot your OS.

The list will appear at the beginning of the download. We need to select the “Troubleshooting” item from the proposed list. Here you can roll back the system to its original state if something goes wrong.
But now we need "Boot Options". It is in them that the ability to turn off is located.
You will see a long list of different options. Here, and debugging - everything your heart desires for commanding your system. What we need is at number 7.

The selection can be made using the keyboard - 7 or F7.
And now the download begins in the mode that is correct for us - prohibiting digital signatures.

When the computer boots up, digital signatures will no longer be checked. Of course, until the next shutdown.

Option 2 – on a permanent basis

You can also disable mandatory driver digital signature verification in Windows 10 so that there are no checks at all until you roll back. This is very convenient if you constantly install something. This method is simpler, although it doesn’t look like it at first glance:

First, you need to find out what BIOS mode you have on your computer: WIN+X and then Control Panel>System and Security>Administration>System Information.

If you have UEFI, disable the Secure Boot OS legitimacy check utility. It prohibits booting a system that has not confirmed its legitimacy. You need to go into the BIOS. Reload your computer and on the first screen (it will be black) you will see which button opens the settings on your PC. Press it. In the Security tab, find the Secure Boot option and check disabled next to it. Save and exit.
Remember what you need to do to?

Go to the system32 folder, where this program is located. First look at where you are. If on the command line you have a path like C:\USERS\HOME, then you need to change the path:
1. Type c: and press Enter. Switched to drive C.
2. Now we type Cd twice .. This is the command to move up a level.
3. We need to go to the Windows folder. Type Cd Windows.
4. Then everything is simple: Cd system32
There is a simpler option: open the system32 folder on drive C in Windows folder. And in it find the cmd.exe file. This is the command line. Then you will immediately get the desired path.
Now we start editing the OS boot configuration. IN system folder Windows contains the file BCDEDIT.exe - Boot Configuration Data. We prohibit digital signature verification by specifying the following parameters:

bcdedit.exe -set loadoptions DISABLE_INTEGRITY_CHECKS\

Then press ENTER and charge the test boot mode.

bcdedit.exe -set TESTSIGNING ON

After rebooting, you will see a warning. It will hang before your eyes, reminding you that the protection is not working. Windows 10 driver digital signature verification will be disabled forever.

How else can you allow Windows 10 to install unsigned drivers through command line:

Go to safe mode. To do this, again go to the special download and press 4 (see screenshot 3).
Now type: exe /set nointegritychecks on. Please note that a space must appear after the file name and should not be between the slash and the command! And do not forget that the command line is loaded as an administrator, otherwise you may not have enough rights to execute the code.
And reboot again.

Now you can install the driver without a digital signature in Windows 10.

Option 4 - another way to download without checking the digital signature of Windows 10 drivers

True, the HOME (home) version does not support it, only PRO.

Press WIN+R and enter the command gpedit.msc in the Run window. The Local Group Policy Editor window will open. Here you can manage your system and users.
Sequentially select “User Configuration”, then “Administrative Templates”, “System”, “Driver Installation”.
Double-click on the “Digital Signature of Device Drivers” option.

Set it to Disabled, or under If Windows detects a driver file that is not digitally signed, select Ignore.

Reboot.

Now you can use any device, even if it has a driver without digital windows signatures 10. For example, a tuner. And if you have problems with the image, then on our website you can read how .

If you are interested in how you can save computer resources, we suggest reading about.

How to enable digital signature of drivers back?

Use the command:

bcdedit.exe -set TESTSIGNING OFF

You will come out test mode. Then we enable the check with the command

bcdedit.exe /set loadoptions ENABLE_INTEGRITY_CHECKS

Brief definition of a driver: it is a program thanks to which computer equipment(“hardware”) becomes visible to the operating system and can be used by it. Like any other programs, drivers have a digital signature option. By clicking on any installer file right click mouse and selecting “Properties”, you can study information on this issue in the tab of the same name.

In fact, the presence of a digital signature is one of the guarantors of file security. But sometimes programs are not signed. The same can happen with drivers. Windows 10 blocks installation by default similar applications. The fact is that the absence of a signature may indicate that the installation is tampered with. For what purpose? Who knows. Therefore, installing such drivers and applications is truly unsafe.

If you are still sure that you are doing everything correctly, and the lack of a digital signature does not threaten your data, you can try disabling verification in Windows 10 this parameter. But, still, if there is a way for the installation to take place without such a shutdown, it is better to use it. Workers Microsoft Still, it’s not in vain that they rack their brains over how to make their product safer and less vulnerable to various types threats.

Two ways to turn off

There are at least two methods to disable digital signature verification. The first method “kills” this protection for the entire time until you manually start it again. In the second case, the shutdown will be one-time, that is, the check will turn on again after a reboot. There is no need to explain why the second method is preferable. True, the first one is simpler.

Using the Command Line

If you have UEFI instead of the classic BIOS, you must first disable Secure function Boot (you can get to the settings by pressing the Del or F2 key when turning on the computer).
In the list of applications and run it as Administrator.

In the command prompt window, enter: exe -set loadoptions DISABLE_INTEGRITY_CHECKS and press Enter.
Now enter: exe -set TESTSIGNING ON and also press the Enter key.
Reboot.

The required settings are complete and digital signature verification no longer works. Good worker Windows table 10 now boasts a message about working in test mode, so you yourself will want to enable the test after installing all necessary drivers. To do this is simply exactly the same as in the previous steps, but using a single command: bcdedit.exe -set TESTSIGNING OFF.

Editing boot options

You can disable driver verification once for one system boot by editing the main parameters Windows boot 10. This is not done in the working environment itself, but during the reboot process. In order:

Open All Settings in Windows 10 and go to Updates & Security.

Here, open "Recovery".
Click on the button marked with a red marker:

Windows 10 will restart, after which you need to go to: Diagnostics - Additional. Options - Boot Options and click on the reboot button again. The next start of the system will open, in fact, the very same boot parameters that we are “hunting” for in order to disable interfering functionality. The cherished seventh point directly says that you need to choose it.

In Windows 7, Microsoft has significantly tightened the requirements for installed drivers (we recommend reading this interesting article about). Now any driver you install must be digitally signed, verified and certified by Microsoft. Before downloading and installing any driver Windows devices 7 verifies the digital signature of this driver. And if, when you try to install a driver for a new device in Windows 7, you see the message: “ Windows can’t verify the publisher of this driver software", Means, this driver does not have a digital signature. In the dialog box indicated, you can select the option ”Install this driver software anyway” ("Install this driver anyway"), however, in any case, this driver will not be installed, which means the device will not work.

When installing an unsigned driver, in Device Manager this device will be marked exclamation point and contain the following error message:

Windows cannot verify the digital signature for the drivers required for this device. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. (Code 52)

The following errors may also indicate problems with the digital signature of drivers:

The driver digital signature verification policy works in both 32 (x86) and 64 (x64) Windows versions 7 and main reason the appearance of such an installation policy third party drivers– a desire to improve the stability and reliability of the Windows OS by ensuring that all released drivers pass the Microsoft certification and compatibility test.

Fortunately, in Windows 7 you can disable driver digital signature verification. And you can do this in several ways:

Sign the driver yourself (you can do this using special software, or according to the instructions described in the manual)
Disable driver signature verification using Group Policy
Change the OS boot mode to boot without digital signature verification (using bcdedit)
Download Windows 7 without digital signature verification (via boot menu by F8 key)

Let's consider all the listed options for disabling driver signature verification

Booting Windows 7 without verifying digital signature

It is possible to temporarily disable driver signature verification if you reboot the system and press the key at boot F8 . In the menu that appears with system boot options, select DisableDriverSignatureEnforcement(“Disable mandatory driver signature verification”).

After booting Win 7, you can install an unsigned driver and test its operation, but if you boot into normal mode, the driver will not work

Disable driver signature verification in Windows 7 using Group Policy

If you want to completely disable driver signing verification in Windows 7, you can do this using Group Policy.

Open the Local Group Policy Editor by typing

In the policies menu, go to User Configuration->Administrative Templates->System->Driver Installation.

In the right panel, find the item ‘Code Signing’ for Device Drivers' and double click on it.

In the window that appears, select 'Enabled', and in the lower menu - 'Ignore'. Click OK and restart your computer. After rebooting and applying the policy, you will completely disable driver signing in your Windows 7 and will be able to install any drivers, including unsigned ones.

Disable driver digital signature verification in Windows 7 using bcdedit

Open a command prompt with administrator rights and type the following two commands in sequence:

Bcdedit.exe /set loadoptions DDISABLE_INTEGRITY_CHECKS bcdedit.exe /set TESTSIGNING ON

After executing each command, a message should appear indicating that the command was completed successfully.

Restart your computer and try installing an unsigned driver. Voila!

If you need to cancel this operating mode and re-enable digital signature verification in win 7, run the following commands:

Bcdedit.exe /set loadoptions ENABLE_INTEGRITY_CHECKS bcdedit.exe /set TESTSIGNING OFF