Windows 10 is continuously improving its security capabilities after major updates. One of these improvements is the ability to block unsigned drivers. Typically, drivers released by manufacturers come with devices, are scrutinized, authenticated, and digitally signed by Microsoft. These drivers are then installed on Windows devices to ensure that your computer is controlled by “official” drivers and remains secure.
What happens if we mistakenly install a malicious driver on our computer? Drivers not only affect regular software but also interact deeply with the system's highest layer (kernel). If a malicious driver is installed on a machine, the impact extends beyond just software to the entire computer system.
However, for programmers or advanced users, their own customized or experimental drivers may not run on Windows 10. So how do you tackle this issue? Mytour will guide you on disabling the driver signature enforcement feature on Windows 10. Please note, you should only follow this guide if you truly understand the system and the drivers you're about to install.
Disable the feature blocking installation of unsigned drivers .
Disable blocking installation of unsigned drivers via Recovery
Note: This method can only be applied to Windows 10 versions older than the Anniversary Update (ver 1607)
Step 1 : Press Windows + I , then click Update & Security
Step 2 : Select Recovery , then click Advanced startup
Step 3: Your computer will restart in Advanced Startup mode, click Troubleshoot
Step 4 : Choose Advanced Option
Step 5 : Select Startup Setting
Step 6 : Press Restart to reboot your computer and choose the boot method
Step 7 : Press F7 to activate the Disable Driver Signature Enforcement feature
Your computer restarts, and from here you can install unsigned drivers.
Turn off Secure Boot
Secure Boot is a security boot mode established on UEFI BIOS generation. With numerous enhancements, it is considered one of the best security mechanisms for your system. However, this makes it challenging to install unsigned drivers on UEFI systems.
Mytour will guide you to turn off Secure Boot; however, this method will affect the security of your system, so you should carefully consider before proceeding.
Step 1 : Boot into Advanced Startup mode similar to the method 1.
Step 2: Press Troubleshoot
Step 3 : Press to select Advanced Setting
Step 4 : Press UEFI Firmware Setting
Step 5: Press Restart to boot into UEFI Firmware Setup mode
Different laptop models will have different Firmware setup interfaces from here. Look for the Secure Boot option to Disable.
HP
ASUS
ASROCK
ACER
After completing the steps, repeat the same process as above to re-enable Secure Boot mode.
Install unsigned drivers in Test Mode
Test Mode is a hidden mode in Windows 10 that allows advanced users, programmers to operate more easily with software they build when bypassing strict security checks on the Windows system. Therefore, unsigned drivers can be easily installed in this mode. Follow the instructions below to activate this mode.
Step 1: Press Windows + X , then click Windows Powershell (Admin) to launch the Windows Powershell command program
Step 2: Type the command bcdedit /set testsigning on
Step 3: Here, if successful, your computer will restart, and Windows 10 will be in Test Mode. If there's an error message, Secure Boot feature on your computer may be enabled, repeat the steps above with the second method to disable Secure Boot
Step 4: After completing testing and verifying unsigned drivers on Windows 10, reopen the Windows Powershell interface, disable Test Mode with the command
bcdedit /set testsigning off
Here are some instructions for you to disable the feature blocking installation of unsigned drivers on Windows 10. If you're an average user, we recommend installing “official” drivers provided by the device manufacturers to ensure security for your computer system or installing drivers automatically via Driver Booster to ensure the smoothest device operation.
