如果您收到Windows 需要数字签名驱动程序^{(Windows requires a Digitally Signed Driver)}消息，那么这篇文章将向您展示如何通过Windows 11/10/8/7中的高级启动^{(Advanced Startup)}选项^(Options)或CMD永久禁用驱动程序签名强制^{(disable Driver Signature enforcement)}。驱动程序签名^{(Driver Signing)}是将数字签名与驱动程序包相关联的过程。

驱动程序签名^{(Driver Signing)}是将数字签名与驱动程序包相关联的过程。Windows设备安装使用数字签名来验证驱动程序包的完整性并验证提供驱动程序包的供应商的身份。

您通常从Windows 更新^{(Windows Update)}、原始设备制造商^{(Original Equipment Manufacturers)}或某些第 3 方驱动程序下载软件等安装在计算机上的驱动程序必须由Microsoft通过数字签名进行数字验证。它是一种电子安全标记，用于证明驱动程序的发布者以及与其相关的所有相关信息。如果驱动程序未经Microsoft认证，Window将不会在 32 位或 64 位系统上运行它们。这称为“驱动程序签名强制”。

Windows 11/10 将仅加载由Dev Portal数字签名的内核模式^{(Kernel-mode)}驱动程序。但是，这些更改只会影响开启安全启动^{(Secure Boot)}的操作系统的新安装。未升级的全新安装需要Microsoft签名的驱动程序。

有时您可能会收到一条消息 - Windows 需要数字签名驱动程序^{(Windows requires a Digitally Signed Driver)}。如果您愿意，可以禁用驱动程序签名^{(Driver Signature)}强制。让我们看看如何做到这一点。

在Windows 11/10上禁用驱动程序签名强制^{(Driver Signature Enforcement)}

您可以使用三个选项-

1. 使用高级启动菜单
2. 启用测试签名模式
3. 禁用设备驱动程序签名。

1]使用高级启动菜单

在Windows^(Windows)中选择“重新启动”选项时按住Shift键。您的计算机将使用高级^(Advanced)选项^(Options)重新启动。从显示的选项列表中，选择“疑难解答”图块。

接下来，选择“高级选项”并点击“启动设置”磁贴。

接下来，在“启动设置”^{(Startup Settings)}屏幕上选择“重新启动”按钮以重新启动您的 PC。

您将在重新启动时看到以下屏幕。按7键盘键激活“禁用驱动程序签名强制^{(Disable driver signature enforcement)}”选项。

完成后，您的 PC 将在禁用驱动程序签名强制的情况下重新启动，您将能够安装未签名的驱动程序。

话虽如此，下次重新启动计算机时，将禁用驱动程序签名强制。^{(Having said that, the next time you restart your computer, driver signature enforcement will be disabled.)}

2]禁用设备驱动程序签名

^{(Run Command Prompt)}以管理员身份^{(Administrator)}运行命令提示符并执行以下命令：

bcdedit.exe /set nointegritychecks on

这将自动禁用您设备上的驱动程序签名强制。

如果您希望再次启用此功能，则需要在提升的 cmd 窗口中执行以下命令：

bcdedit.exe /set nointegritychecks off

为此，必须禁用安全启动策略。^{(Secure Boot Policy)}

如果您决定退出此模式，请运行以下命令：

bcdedit /set testsigning off

希望这对你有用。

3]启用测试签名模式

启用第一个选项将成功禁用驱动程序签名强制功能，直到您选择离开测试模式^{(Test Mode)}。要启用此选项，您必须以管理权限打开命令提示符^{(open Command Prompt with administrative privileges)}。为此，请在搜索框中键入CMD，右键单击命令提示符，然后选择“以管理员身份运行”选项。

接下来，将以下命令粘贴到命令提示符^{(Command Prompt)}窗口中，然后按 Enter：

bcdedit /set testsigning on

在计算机的UEFI 固件设置^{(UEFI Firmware Settings)}中禁用它以通过Advanced Startup Options启用测试签名模式。

重新启动计算机以进入测试模式。“测试模式”水印应该出现在电脑屏幕的右下角。当你看到这个时，它表明安装未签名或未验证的驱动程序没有限制。

就是这样！

您需要知道驱动程序签名^{(Driver Signing)}是一种保护您的系统的安全功能，您应该考虑尽快重新启用它。

How to disable Driver Signature enforcement on Windows 11/10

If you receive Windows requires a Digitally Signed Driver message, then this post will show you how to disable Driver Signature enforcement permanently via Advanced Startup Options or CMD in Windows 11/10/8/7. Driver Signing is the process of associating a digital signature with a driver package.

Driver Signing is the process of associating a digital signature with a driver package. Windows device installations use digital signatures to verify the integrity of the driver packages and to verify the identity of the vendor who provides the driver packages.

The drivers you normally install on your computer from Windows Update, Original Equipment Manufacturers, or some 3th-party driver download software, etc. must be digitally verified by Microsoft via a digital signature. It is an electronic security mark that certifies the publisher for the driver, as well as all the relevant information related to it. If a driver isn’t certified by Microsoft, Window won’t run them on either 32-bit or 64-bit system. This is referred to as “driver signature enforcement”.

Windows 11/10 will load only Kernel-mode drivers signed digitally by the Dev Portal. However, the changes will affect only the new installations of the operating system with Secure Boot on. The non-upgraded fresh installations would require drivers signed by Microsoft.

At times you may receive a message – Windows requires a Digitally Signed Driver. If you wish you can disable Driver Signature enforcement. Let us see how to do it.

Disable Driver Signature Enforcement on Windows 11/10

There are three options available to you-

1. Use Advanced Boot Menu
2. Enable Test Signing Mode
3. Disable Device Driver Signing.

1] Use Advanced Boot Menu

Hold down the Shift key while choosing the “Restart” option in Windows. Your computer will restart with Advanced Options. From the list of options displayed, select the “Troubleshoot” tile.

Next, select “Advanced options” and hit the “Startup Settings” tile.

Next, select the “Restart” button to restart your PC on the Startup Settings screen.

You will see the following screen on restart. Press the 7 keyboard key to activate the “Disable driver signature enforcement” option.

Once done, your PC will reboot with driver signature enforcement disabled, and you’ll be able to install unsigned drivers.

Having said that, the next time you restart your computer, driver signature enforcement will be disabled.

2] Disable Device Driver Signing

Run Command Prompt as Administrator and execute the following command:

bcdedit.exe /set nointegritychecks on

This will automatically disable driver signature enforcement on your device.

If you wish to enable this feature back again, you need to execute the following command in an elevated cmd window:

bcdedit.exe /set nointegritychecks off

To be able to do this, Secure Boot Policy will have to be disabled.

If you decide to exit this mode, run the following command:

bcdedit /set testsigning off

Hope this works for you.

3] Enable Test Signing Mode

Enabling the first option will disable the driver signature enforcement feature successfully until you choose to leave the Test Mode. To enable this option, you will have to open Command Prompt with administrative privileges.  For this, type CMD in the search box, right-clickCommand Prompt’, and select ‘Run as administrator’ option.

Next, paste the following command into the Command Prompt window and press Enter:

bcdedit /set testsigning on

Disable it in your computer’s UEFI Firmware Settings to enable test signing mode via Advanced Startup Options.

Restart your computer to enter test mode. A “Test Mode” watermark should be visible in the bottom right corner of your computer screen. When you see this, it indicates no restriction for installing unsigned or not verified drivers.

That’s it!

You need to know that Driver Signing is a security feature that protects your system and you should consider re-enabling it as soon as it is possible.

Related posts

• 如何在Windows 10中禁用Automatic Driver Updates

• Install Realtek HD Audio Driver Failure，Error OxC0000374上Windows 10

• Best免费Driver Update Software为Windows 10

• 什么是tap-windows Adapter v9？我在哪里下载这个Driver？

• 如何在Windows 10查看Wi-Fi Network Driver information

• 如何在Windows 10中使用Command Prompt更新驱动程序

• Remove NVIDIA driver的不需要的单个组件

• 如何在Windows 10中安装Driver and Optional Updates

• Windows无法验证数字签名（Code 52）

• 无法在Windows 11/10上安装Synaptics，ASUS等Touchpad驱动程序

• PCI Serial Port Driver在Windows 11/10上未安装

• 在哪里下载Windows 10的NVIDIA驱动程序

• 已安装的驱动程序未验证此计算机

• Windows computer安装图形驱动程序时冻结

• Device在Windows 11/10上需要进一步的installation error

• Install and Update Drivers带Snappy Driver Installer

• 在哪里下载Windows 11/10的驱动程序

• Fix ASUS Smart Gesture Touchpad不适用于Windows 10

• 如何在Windows 11/10中使用.inf File手动安装Driver

• 免费Driver Backup & Restore software为Windows 10