Author Topic: How to Disable Driver Signature Enforcement in Windows 11  (Read 65 times)

Offline javajolt

  • Administrator
  • Hero Member
  • *****
  • Posts: 35035
  • Gender: Male
  • I Do Windows
How to Disable Driver Signature Enforcement in Windows 11
« on: January 17, 2023, 06:10:44 PM »
Do not hesitate to apply this quick procedure, as described below

► Driver Signature Enforcement is a feature in Windows 11, that only allows the drivers signed by Microsoft to be installed on the computer.

► You can disable the feature via the Windows RE or using the Local Group Policy Editor, the steps for both are listed here.

► A quick method to turn this feature off is via Advanced Boot Options.

Microsoft has embedded several security features in Windows to ensure that your PC remains safe and secure. One of these is Driver Signature Enforcement in Windows 11.

If you get Windows requires a digitally signed driver or a similar message, then this feature is the problem, and today we’re going to show you how to disable the driver signature enforcement in Windows 11.

What happens when you disable Driver Signature Enforcement?

Disabling driver signature enforcement allows unsigned drivers to be installed on the system. This can be useful for installing older or custom drivers that Microsoft does not digitally sign, but it can also increase the risk of installing malicious or unstable drivers.

Disabling Driver Signature Enforcement allows you to install drivers that Microsoft doesn’t verify. This comes with a couple of benefits and flaws:

Security concerns – By disabling this feature, you’ll allow unverified drivers to be installed on your PC. This can be a security risk and allow rootkits to be installed. If this happens, you’ll need USB antivirus software to remove them.

Testing purposes – If you’re developing a driver or using older drivers for some reason, you’ll need to disable this feature to install unsigned drivers.

Now let's explore how to disable Driver Signature Enforcement.

How can I disable Driver Signature Enforcement in Windows 11?

1. Via Windows Recovery Environment (RE)

Press the Windows key to launch the Start menu, click on the Power icon, press and hold the Shift key, and then click on Restart to enter the recovery mode in Windows 11.

2. Once the OS enters the recovery environment, click on Troubleshoot.

3. Next, click Advanced options.

4. Select Startup settings from the six options listed here.

5. Now, click on the Restart button.

6. If you are asked to enter the BitLocker recovery key, find out what to do. With the feature enabled, Windows may ask you to provide the key to ensure that no one else is accessing the data.

7. Finally, press the F7 or 7 key to boot Windows with the Driver Signature Enforcement feature disabled.

Once the system restarts, the Driver Signature Enforcement feature will now be disabled in Windows 11, and you can install the desired unsigned driver on your PC. To re-enable the feature, just restart the computer.

2. Use the Local Group Policy Editor

1. Press Windows + R to launch the Run command, enter gpedit.msc in the text field, and either click on OK or hit Enter to launch the Local Group Policy Editor.

2. Double-click on Administrative Templates under User Configuration in the navigation pane on the left, and then click on System.

3. Double-click on Driver Installation on the right.

4. Next, double-click on Code signing for driver packages.

5. Select the Enabled option.

6. Click on the When Windows detects a driver file without a digital signature dropdown menu, select Ignore, and then click on OK at the bottom to save the changes.

This method to disable Driver Signature Verification in Windows 11 will only work for those running the Pro edition. This is because the Local Group Policy Editor is not available in the Home edition.

Should I disable the Driver Signature Enforcement feature in Windows 11?

This is the real question here. Though you may want to install a driver that performs better, it’s not always safe. So, if the current ones work just fine, there’s no need to experiment with new ones.

The Driver Signature Enforcement feature is there for a reason, and when you disable it, it negates the whole purpose. Microsoft signs drivers after they are thoroughly checked, their authenticity and reliability verified, and these are the ones that should be installed.

But if you want to download an unsigned driver, do make sure to conduct thorough research, both on the source and the driver itself. And once satisfied, you can disable the feature and install the driver.

In most cases, updating the driver should help boost the device’s performance if you disable the feature for that.