How to disable driver signature enforcement on Windows 11

UPDATED 3/24/2025: On Windows 11, you can disable “driver signature enforcement” to install unsigned drivers through the Windows Recovery Environment (WinRE). This security feature ensures that only drivers signed by Microsoft are permitted, safeguarding system integrity.

While it’s recommended to verify the integrity and publisher of any driver to prevent potential system instability or security risks, there are scenarios where installing an unsigned driver may become necessary. For instance, you might need to install an older driver version from a trusted source, use a device lacking a signed driver from its manufacturer, or test a custom, unsigned driver.

Regardless of the reason, Windows 11 includes different ways to disable signature enforcement to install unsigned drivers using recovery settings during startup. However, consider that disabling driver signature enforcement can expose your system to potential security threats. Always ensure that any unsigned drivers you install are from trusted sources.

In this guide, I’ll teach you the steps to disable signature enforcement to allow the installation of unsigned drivers on Windows 11.

Disable driver signature enforcement on Windows 11 from Advanced Startup

To disable signature enforcement on Windows 11, use these steps:

1. Open Settings on Windows 11.

2. Click on System.

3. Click the Recovery tab.

4. Click the Restart now button for the “Advanced startup” setting under the “Recovery options” section.

5. Click on Troubleshoot.

6. Click on Advanced options.

7. Click on Startup Settings.

   

8. Click the Restart button.

   

9. Press “F7” or the “7” key to select the Disable driver signature enforcement option.

   

Once you complete the steps, Windows 11 will boot normally but with the signature enforcement feature turned off, allowing you to install unsigned drivers on the computer. After the installation, during the next reboot, the driver signature enforcement will be enabled once again, and you’ll need to repeat the instructions to install another driver (if applicable).

Disable driver signature enforcement on Windows 11 from Group Policy

To turn off driver signature enforcement from Group Policy, follow these steps:

1. Open Start.

2. Search for gpedit and click the top result to open the Group Policy Editor.

3. Browse to the following path:

   User Configuration > Administrative Templates > System > Driver Installation

4. Right-click the “Code Signing for Driver Packages” policy and choose the Edit option.

   

5. Choose the Enabled option.

6. Select the Ignore option under the “Options” section to allow the system to proceed with the installation of unsigned drivers.

   

7. Click the Apply button.

8. Click the OK button.

9. Restart the computer

After you complete the steps, you should be able to install unsigned drivers on the device.

If you want to revert the changes, you can use the same instructions, but in step 5, select the “Not configured” option.

You may also use the bcdedit /set testsigning on or the bcdedit /set nointegritychecks on command to disable the security feature. However, since Windows 11 uses Secure Boot, you may encounter errors and other problems running these commands.

Update March 24, 2025: This guide has been updated to ensure accuracy and reflect changes to the process.