Windows 10 driver signature disabling program. Disabling Windows Defender

Owners of wonderful PCs and laptops with the new ten are already faced with the fact that a driver with a digital signature of Windows 10 is required. Microsoft has greatly tightened the system in terms of security - now you cannot install anything without digital signature. Sometimes there is a need to disable digital signature verification of Windows 10 drivers. We are not looking for easy ways. Most often, we need exactly that program or device that does not have any signs of a license. How often do we download from the Internet what kind people have posted?

Attention! Remove protection carefully, as the Internet is a source of danger. You may inadvertently accept a download from the site, or it will be done behind the scenes. Then your PC will be attacked by a virus. So changing security settings can lead to disastrous consequences.

How to disable digital signing of drivers in Windows 10

There are three ways. Four actually, but the last one isn't for everyone.

Option 1 - temporary shutdown

Valid until the first reboot. This means that as soon as you turn off the computer, all settings will be removed and the operating system will return to its original state. In principle, this is enough to install in the current session. But when you turn on the computer again, the system will be protected. So, let's follow the instructions:

Click the button in the lower left corner of the screen and look for the gear icon. This opens the Computer Settings window.

Next we need to ensure that the OS does not load in the usual way, but in a special version. Windows gives you a lot of control. Now we need the “Update and Security” item, which is responsible for protecting the system.
Find “Recovery” in the new window.
Here we will be offered, among other things, Special options downloads.
Do you see the "Restart" button? Click and you will see 9 ways to boot your OS.

The list will appear at the beginning of the download. We need to select the “Troubleshooting” item from the proposed list. Here you can roll back the system to its original state if something goes wrong.
But now we need "Boot Options". It is in them that the ability to turn off is located.
You will see a long list of different options. Here, and debugging - everything your heart desires for commanding your system. What we need is at number 7.

The selection can be made using the keyboard - 7 or F7.
And now the download begins in the mode that is correct for us - prohibiting digital signatures.

When the computer boots up, digital signatures will no longer be checked. Of course, until the next shutdown.

Option 2 – on a permanent basis

Disable mandatory verification You can digitally sign drivers in Windows 10 so that there are no checks at all until you roll back. This is very convenient if you constantly install something. This method is simpler, although it doesn’t look like it at first glance:

First, you need to find out what BIOS mode you have on your computer: WIN+X and then Control Panel>System and Security>Administration>System Information.

If you have UEFI, disable the OS legitimacy check utility Secure Boot. It prohibits booting a system that has not confirmed its legitimacy. You need to go into the BIOS. Reload your computer and on the first screen (it will be black) you will see which button opens the settings on your PC. Press it. In the Security tab, find the Secure Boot option and check disabled next to it. Save and exit.
Remember what you need to do to?

Go to the system32 folder, where this program is located. First look at where you are. If on the command line you have a path like C:\USERS\HOME, then you need to change the path:
1. Type c: and press Enter. Switched to drive C.
2. Now we type Cd twice .. This is the command to move up a level.
3. We need to go to the Windows folder. Type Cd Windows.
4. Then everything is simple: Cd system32
There is a simpler option: open the system32 folder on drive C in Windows folder. And in it find the cmd.exe file. This is the command line. Then you will immediately get the desired path.
Now we start editing the OS boot configuration. IN system folder Windows contains the file BCDEDIT.exe - Boot Configuration Data. We prohibit digital signature verification by specifying the following parameters:

bcdedit.exe -set loadoptions DISABLE_INTEGRITY_CHECKS\

Then press ENTER and charge the test boot mode.

bcdedit.exe -set TESTSIGNING ON

After rebooting, you will see a warning. It will hang before your eyes, reminding you that the protection is not working. Digital signature verification windows drivers 10 will be disabled forever.

How else can you allow Windows 10 to install? unsigned drivers via command line:

Enter Safe Mode. To do this, go again to special download and press 4 (see screenshot 3).
Now type: exe /set nointegritychecks on. Please note that a space must appear after the file name and should not be between the slash and the command! And do not forget that the command line is loaded as an administrator, otherwise you may not have enough rights to execute the code.
And reboot again.

Now you can install the driver without a digital signature in Windows 10.

Option 4 - another way to download without checking the digital signature of Windows 10 drivers

True, the HOME (home) version does not support it, only PRO.

Press WIN+R and enter the command gpedit.msc in the Run window. The Local Group Policy Editor window will open. Here you can manage your system and users.
Sequentially select “User Configuration”, then “Administrative Templates”, “System”, “Driver Installation”.
Double-click on the “Digital Signature of Device Drivers” option.

Set it to Disabled, or under If Windows detects a driver file that is not digitally signed, select Ignore.

Reboot.

Now you can use any device, even if it has a driver without digital windows signatures 10. For example, a tuner. And if you have problems with the image, then on our website you can read how .

If you are interested in how you can save computer resources, we suggest reading about.

How to enable digital signature of drivers back?

Use the command:

bcdedit.exe -set TESTSIGNING OFF

You will come out test mode. Then we enable the check with the command

bcdedit.exe /set loadoptions ENABLE_INTEGRITY_CHECKS

Sometimes problems can arise when installing absolutely any driver. One of them is the problem with checking the digital signature of the driver. The fact is that by default you can install only software that has a signature. Moreover, this signature must be in mandatory verified by Microsoft and have the appropriate certificate. If such a signature is missing, the system simply will not allow such software to be installed. In this article we will tell you how to bypass this limitation.

In some cases, even the most trusted driver may not be properly signed. But this does not mean that the software is malicious or bad. Most often, owners of Windows 7 suffer from problems with digital signatures. In subsequent versions of the OS, this issue arises much less frequently. You can identify a problem with a signature by the following symptoms:

You can fix all the problems and errors described above only by disabling the mandatory check for a digital signature on the driver. We offer you several ways to help you cope with this task.

Method 1: Temporarily disable scanning

For your convenience, we will divide this method into two parts. In the first case, we will tell you how to apply this method, if you have Windows 7 or lower. The second option is suitable only for owners of Windows 8, 8.1 and 10.

If you have Windows 7 or lower

If you have Windows 8, 8.1 or 10

No matter what operating system you have, this method has disadvantages. After the next system reboot, signature verification will start again. In some cases, this can lead to blocking the operation of drivers that were installed without the appropriate signatures. If this happens, you should disable the scan permanently. The following methods will help you with this.

Method 2: Group Policy Editor

This method will allow you to disable signature verification forever (or until you activate it yourself). After this, you can safely install and use software that does not have the appropriate certificate. In any case, this process can be reversed and signature verification can be turned back on. So you have nothing to fear. In addition, this the method will work owners of any OS.

Method 3: Command Line

This method is very easy to use, but has its drawbacks, which we will discuss at the end.

Please note that this method sometimes has to be done in safe mode. You can learn how to start the system in safe mode using our special lesson.

By using one of the suggested methods, you will get rid of the installation problem third party drivers. If you have difficulties performing any actions, write about it in the comments to the article. We will jointly solve the difficulties that arise.

As a rule, disabling driver signature verification in Windows 10 is necessary when the downloaded device driver does not have a digital signature confirming the security of the program. Driver signing ensures that the file comes from a trusted source and is not a virus.

Installing drivers without a digital signature is not always safe, but there are situations when it is the only way. For example, the driver may simply not have been tested for compatibility with your version of Windows. This article will teach you how to disable driver signing in Windows 10.

Disabling Windows 10 Driver Signature Verification One Time

This method allows you to disable driver signature verification one-time, until the next computer restart. That is, we disabled the verification, installed the driver, rebooted Windows and that’s it, the signature verification service works again.

Click on the "Start" menu and go to " Windows Settings"(gear icon).

Go to the "Update and Security" section.

Go to the “Recovery” tab and in the “Special boot options” section, click “Restart now”.

Next, go to the “Download Options” item.

A menu will open with a choice of options Windows boot 10. Click on the item “Disable mandatory driver signature verification”.

You can either click on this point, or simply press the F7 key on your keyboard. After this, Windows 10 will boot without checking driver signatures, and you can safely install it. The next time you boot your computer, signature verification will work again.

Disable Windows 10 Driver Signature Verification Permanently

If there are three solutions, how can you disable driver signature verification forever.

Disable via Group Policy.

Disabling signature verification through the Group Policy Editor is only possible in Windows 10 Professional. If you have home version, then the method described in the next chapter of this article will suit you.

Launch the Windows 10 Local Group Policy Editor. To do this, click right click on the start menu and left-click on “Run”. Or just press the Win+R key combination.

Write gpedit.msc in the window that opens and press OK or Enter.

In the Group Policy editor that opens, go to the following registry branches: “User Configuration” - “Administrative Templates” - “System” - “Driver Installation”. Double-click on the line on the right “Digital signature of device drivers”.

In this setting, you can choose two options in which you will solve your problem with driver signature verification. By default, the setting is “not configured”. If you enable the setting, then select the “skip” subsetting. In this case, if Windows detects a driver file without a digital signature, it will still allow you to install it. You can also explicitly select “disabled” and in this state the check will be disabled in principle.

Once you have changed the settings click “Apply” and “OK”. After restarting the computer, driver signature verification will not be performed. If you need to return driver signature verification again, you will have to return to this menu and select the setting status “enabled” and “block”.

Disabling via command line

Disabling driver signature verification via the command line has a limitation. This feature is only available if your computer is running BIOS. If you have UEFI, then you must first disable Secure Boot.

The procedure is as follows. Right-click on the Start menu and open Command Prompt with administrator rights.

In the command prompt that opens, type the following command and press Enter.

bcdedit.exe -set loadoptions DISABLE_INTEGRITY_CHECKS

Now enter the second command and also press Enter.
bcdedit.exe -set TESTSIGNING ON

After the commands work (as in the screenshot above), restart your computer. Checking driver signatures will be disabled, but a sign about test mode will always hang in the lower right corner of the screen Windows operation 10.

To remove it, you will need to open a command prompt with administrator rights and type in next line:

bcdedit.exe -set TESTSIGNING OFF

Disable via safe mode and bcedit

This proven method is, in my opinion, the most convenient. Start your computer in safe mode.

Right-click on the Start menu and launch Command Prompt with administrator rights.

At the command prompt, enter the following line: bcdedit.exe /set nointegritychecks on and press Enter. Reboot your computer, after which signature verification will be disabled.

To enable the check again, perform the same operations, but enter the line bcdedit.exe /set nointegritychecks off.

Absolutely all operating systems Windows latest generations, the requirements for installed software have become extremely stringent, not only for application software, but also for control software. In particular, this applies to hardware drivers and virtual devices. The system constantly checks the so-called digital signature, which certifies the publisher (developer). On how to disable driver digital signature verification in Windows 7 or higher systems, further and we'll talk. But first, let’s dwell on what it is in general and why it is needed.

What is a digital signature and why are there problems with it?

Actually, the digital signature itself is nothing more than a certain mark, the presence of which indicates the legality of this software and him complete safety. In addition, such a signature indicates that this software has been certified according to international standards and is fully compatible with supported operating systems in which the corresponding system components that control the devices are expected to be installed.

However, the most basic reason why it is necessary to disable driver digital signature verification (Windows 7 is installed on the computer or more new system, not so important), lies in the fact that the main database of system drivers may not always contain control programs for non-standard devices or for equipment from manufacturers that are not on the support list, although their devices work just as well. In general, the picture turns out to be very sad: Windows does not see the signature and, when attempting to install, classifies the driver as potentially dangerous or unwanted software. Yes, of course, sometimes viruses can masquerade as such drivers, but if the user is absolutely sure of the driver’s security (for example, when downloading it from the equipment manufacturer’s website), then he will have to disable driver digital signature verification (we’ll take Windows 7 as an example for now, although for other systems the proposed solutions are absolutely identical). Next, it is proposed to consider several basic techniques using the OS tools themselves or using third-party programs.

In principle, you can bypass such checks at the stage of driver installation. The operating system will usually display a message that the signature is missing, and the user should simply ignore this message and use the “Install Anyway” line. Naturally, Windows will start to “spit”, issuing warnings again and again. Again, you just need to ignore them, and in the end the necessary software will be installed (however, it is not a fact that the device will work correctly, since the system, due to its prohibitions and restrictions, can simply block the use of the installed driver). However, it is possible to combat such prejudices in Windows, and quite simply (fortunately, it itself is full of tools that allow you to disable these actions within a couple of minutes).

How to disable digital signature verification of Windows 7 drivers: methods

As for the basic techniques that are used to perform actions of this kind, the following are considered the most basic and effective:

disabling scanning at system boot;
changing parameters group policies;
editing registry keys (almost the same as the previous item, but with higher priority);
application command line;
substitution of signatures using special utilities.

How to disable driver digital signature verification when the system boots?

So let's start with the simplest technique. In Windows 7, you can disable driver digital signature verification at the boot stage. But for this you will need to call a special boot menu by pressing the F8 key at the start (as many do to enter the mode secure boot or to restore the system).

Here you simply select the appropriate line, after which the system is restarted in normal mode. Next you can install the required driver, using either the installer, or sections of the “Device Manager”, or automated programs to install driver updates.

Using Group Policy Management

No less effective is the method that allows you to disable driver digital signature verification in Windows 8.1 and Windows 10 (or the seventh version) in the Group Policy settings and permissions editor. It’s worth saying right away that all the actions described below are best performed under account administrator so that access to some sections is not blocked.

The editor itself is called from the Run console by entering the line gpedit.msc. You can disable driver digital signature verification using Group Policy and using the following sections through the user configuration with further selection of administrative templates, then through the system section and driver installation.

IN last section On the right side of the editor window there is a parameter, the same signature line, on which you need to double-click or call the editing window through the RMB menu.

To install required configuration there are two ways:

complete shutdown services (activation of the “Disabled” line);
enabled mode with the ignore option set if the system detects an unsigned driver.

Both solutions are absolutely equivalent, although ideally it is better to use the first option, since when using the second solution, for some types of programs a corresponding notification may still be issued, which can, to put it mildly, be incredibly annoying. Then all that remains is to save the changes made and perform a full reboot.

System registry manipulation

Similar to the steps described above in Windows 7, you can also disable driver digital signature verification through the registry editor. In principle, this is a kind of duplication of setting parameters in group policies, but changing registry keys has more high priority. In other words, if you change settings in group policies, you can change them in the registry. But once the settings have been configured in the registry, it will be impossible to change them in group policies.

So, first, the editor is called on behalf of the administrator (regedit in the “Run” console), after which in the HKLM branch, through the SOFTWARE and Policies directories, the section tree is navigated to the Driver Signing directory. On the right, you need to edit the BehaviorOnFailedVerify key, giving it a value of 0. If there is no such entry, you will need to create the DWORD key yourself.

There is no need to save changes (this happens automatically). After exiting the editor, as in all other cases, a reboot is performed.

Disabling a service from the command line: method one

In Windows 7, you can also disable driver digital signature verification through the command console launched with administrator rights. There are two main methods used for this.

The first option is to enter the combination shown above in the console, wait for the message about the successful completion of the operation to appear, exit the console and reboot.

Using the Shell: Method Two

The second method is almost similar to the first, only the combinations shown in the picture below are entered on the command line.

Next, as usual, comes a restart. The method may seem somewhat inconvenient due to entering not one, but two commands, however, such a solution cannot be discounted, because in in this case all are considered available options actions.

Using third party utilities

Finally, in Windows 7, you can try to disable driver digital signature verification using various types of programs that allow you to either disable system functions OS, or simply replace the signatures with valid ones.

As the most simple utilities programs with a common name are suitable Windows Manager, released for versions from seventh to tenth inclusive. As for substitution, you can use other applications. But the problem is that the driver can be installed, but after uninstalling the utility itself, it will crash automatically. So you should not rely on such application programs. A driver crash in such a situation can even lead to the system not just freezing or displaying some kind of message about problems that have arisen. But it’s not even possible appearance of BSoD, as a result of which problems will have to be solved at a different level. The solutions here are quite simple, but, as they say, it’s better not to take risks.

Actions with Windows Defender for the tenth modification

In Windows 10, one of the options described above is to completely disable the service Windows Defender, if it is active. Please note that such actions are not required if the system has any other antivirus package(in this case, “Defender” is blocked automatically).

Disabling the “native” component is done through the parameters menu by selecting the system partition, where to Windows options Defender switches off cloud protection and real-time protection.

Here, in fact, are all the main solutions, which are completely equivalent to each other, unless you take into account the actions to disable the Defender toolkit in Windows 10. However, as already mentioned, with the active state installed antivirus such actions are not required.

Yes, and here's another thing. If for some reason all the described actions do not give the desired result or their implementation turns out to be impossible due to too strong restrictions on the part of the so-called super administrator, try reducing the level of control of UAC “accounts” (access to this section can be obtained by typing the desired abbreviation into the search field) or try to do all this using download to Safe Mode. In some cases, this approach may be the only the right decision. But in most cases, even with installed options by default, such actions are not required (they are only needed when the security settings have changed dramatically).

However, finally, it is worth reminding all users without exception that it is recommended to disable checks only in cases where it is known for sure that the software was downloaded from a trustworthy resource and does not contain explicit or implicit threats to performance operating system(for example, when downloading from the website of the device manufacturer or driver developer).

As a last resort, to ensure security after downloading, files should be checked for viruses with any available scanner (preferably portable type, independent of the installed standard means protection). Utilities like KVRT or Dr.Web CureIt!, which are capable of identifying almost everything, are perfect for these purposes. known threats And malicious codes, without requiring installation on hard drive, which can provoke conflicts with the standard antivirus at the software level.

Let's look at how to disable checking digital signatures of drivers. If you try to install a file without such a signature, errors may occur or the system may refuse to install. The only way to solve the problem is to disable the function.

To find where the digital signature settings window is located in your operating system, follow the instructions that apply to your operating system. After deactivating the option, you can easily install any programs and libraries that do not have a signature ID.

Why is a driver digitally signed?

A digital signature is a so-called mark on a file or library that guarantees its security. It is necessary so that the user can find out about the origin and developer of the application. The signature is also verified by the operating system itself at the initial stage of installation of any executable file.

If this attribute is missing or certain errors are found in it, the installation will not begin, and the user will be notified of the possible danger that may result from using an unidentified program.

The digital signature is displayed in a pop-up window as soon as the user starts installing the executable file. In this window, you must give the OS additional permission to run the installation wizard. Here you can see the name of the certificate. It is indicated after the program name. The figure below shows an example of window display User Account Control, in which the application's digital signature is the Publisher field.

Rice. 1 – example of a program certificate verification window

The digital signature is embedded not only in standard applications And system libraries. It can also be found in driver software. A driver is a program that is responsible for configuring the operation of the hardware components of a PC and devices connected to it (video card, mouse, keyboard, printer, microphone, etc.). As a rule, all drivers are installed through the Device Manager window. It can be configured automatic update configurations for any connected device.

Users often download drivers from third party sources. Some of them may be custom (unofficial), so a certified signature is almost always missing in such files. In this case, the computer will detect the absence of an identifier and you will not be able to complete the installation.

Also, configuration errors may occur on Windows. Because of this, even a driver with an official digital signature can be detected as potential threat security for PC. 64-bit versions of the OS immediately block installation and delete the application file if the digital signature is not detected.

The window that appears Windows errors can display one of the following options problems:

“No driver signature”;
“The system cannot verify the program manufacturer”;
"Windows requires a digitally signed driver."

Rice. 2 – example of a Windows Security error window

Most easy option The solution to the problem is to disable digital signature verification. The process for configuring this setting may vary depending on the version of Windows installed on your computer.

Before disabling this feature, the user must be aware of all possible threats for the operating system and computer. The system may not recognize the signature due to its forgery or unsafe content. In most cases, it's best to avoid using apps without a digital ID.

Disabling the function in Windows 7

In Windows 7, the system Group Policy Editor is responsible for the option to enable/disable signature verification. Its window can be opened using the command line. Follow the instructions:

Open the Run window by pressing the Win and R buttons simultaneously;
Enter the command shown in the figure and click OK;

Rice. 3 – command to open a window with a Windows policy group

In the window that appears, open the “User Configuration” tab. Then click on “Administrative Templates”. In the “System” tab, click on the “Driver Installation” option;
In the right part of the window, select “Digital signing of devices”;

Rice. 4 – “Driver Installation” tab in the OS Group Policy window

Disable ID verification in the new window and save your changes.

Rice. 5 – disable scanning for Windows 7

Instructions for Windows 8 and 8.1

For both Windows versions 8, disabling driver signature verification occurs in the same way. As in the previous option, you need to work with the Local Group Policy Editor. Enter the gpedit.msc command in the Run window to open the Settings window or enable the Policy Editor through the Control Panel. Next, follow these steps:

On the left side of the window, go to the “System” directory, as shown in the figure below, and go to the driver installation policy folder. In the right part of the system window, click on the “Digital signature” item with the right mouse button.

Rice. 6 – check option status

Click on "Edit";
In the new window, select the “Enabled” option, and then set the “Options” column to “Skip”;
Click OK and exit the Group Policy Editor.

Now, even after rebooting the operating system, checking for a digital signature will not be enabled. To enable the function, go back to the system editor window and configure the verification parameter.

Rice. 7 – disable scanning in Windows 8 and 8.1

Another way to disable the function is to use the command line. You can disable the option by entering one simple command. Go to the Run window and launch Command Line using the cmd line:

Rice. 8 – command to activate the line

In the window that opens, enter the command shown in the figure below. For restart options change the identifier OFF to ON.

Rice. 9 – command to disable signature verification

Instructions for Windows 10

Most features and options new Windows 10 are similar to the eighth version of the system. Disabling the option constant checking digital driver identifiers are carried out in the Group Policy window:

Go to the editor as shown in the instructions for Windows 8;
Open the window for enabling/disabling signature verification;
Select "Disabled";
Leave the field empty in the parameters column;
Save your changes.

Rice. 10 – disable the option in Windows 10

If there is no zero (empty) value in the drop-down list, select “Skip”. To deactivate using the command line, you need to use two commands. The first is for loading options, the second is for disabling the function. Both commands and the order in which they are executed are shown in the figure below:

Rice. 11 – Disable using Command Line in Windows 10

Disabling Windows Defender

Newer versions of Windows OS (8.1 and 10) have a built-in defender, which also checks the security level of any executable file. Sometimes, simply disabling digital signature verification may not be enough, because Defender may identify the file as dangerous. In this case, it will be immediately deleted or quarantined (depending on the defender settings).

Fig. 12 – Windows Defender main window

If, after disabling driver signature verification, a system window appears about unsafe content in the file, you must disable the operation to continue installing it Windows services Defender. Follow the instructions:

Open a Windows Defender window;
Check the utility's operating status, and then click on the “Options” tab;
You will be redirected to settings Windows systems. In it you need to disable the real-time protection and cloud protection options.

Fig. 13 - disabling Windows protection

Installing drivers without a digital signature should only be done if you are absolutely sure that the file is safe. For example, if you are a developer and have created an application that does not yet have a signature.

The installation file is reliable if you downloaded it from the developer's site. Often latest versions drivers may be incorrectly detected by the digital signature verification server. This indicates that the developer has not yet entered the identifier data into the system or that work on improving the driver is still active. In this case, disabling signature verification and protector will not cause any damage to the installed operating system.

Disabling the function via BIOS

You can disable the signature verification function through the BIOS while loading the operating system. This method is only suitable for those drivers that install components without the need to further reboot the device. Follow the instructions:

Turn on your computer and activate the BIOS. To do this, in the first few seconds after pressing the Power key, click on F8 or another key that is indicated in the boot window;
Navigate the menu using the up and down keys. Selecting is pressing the Enter key. Go to the window additional parameters downloads;
Select "Disable Driver Signature Verification".

Fig. 14 - disabling scanning in BIOS

As a result of selecting this field, Windows will reboot and start in a mode that does not provide for checking the digital signature of the driver software. You can now install the component. The installation error and prohibition window will not appear.

It is worth noting that this mode will only be active until the next computer restart. Make sure that the driver is working correctly, otherwise it may be deactivated after turning on the system again. If the warning window still appears during the installation phase, simply close it and the process will continue automatically without changes.

Create a digital signature manually

If for some reason you were unable to disable the function or the system still requires a digital signature for the installation file, you should assign this identifier to the driver yourself. You can use a number of special applications for this.

DSEO is a popular utility for installing and editing digital signatures for any type of software. Follow the instructions:

After installing DSEO, open the program as an administrator;
In the main window, select Test Mode and go to the next window by pressing the Next button;
Click on the Sign a System Mode option to sign a specific system file and click on Next again;
In the pop-up window, select the file for which a suitable digital signature will be created and click OK;
Wait for the process to finish running and close the program.

Now you can install the selected driver on your computer.

Fig. 15 – working in the DSEO program

Video instructions

Disabling digital signature verification of Windows 7 x64 drivers

How to disable driver digital signature verification in Windows