Driver Signature Enforcement checks whether a Windows driver has been digitally signed. A digital signature helps Windows identify the publisher and determine whether the driver has been modified after it was signed.
If you try to install an unsigned driver, Windows 11 may block the installation or prevent the driver from loading. This is especially common with older hardware, experimental drivers, custom drivers, or software that interacts directly with hardware.
There are several ways to work with DSE. The easiest option for most beginners is Startup Settings, because the change is temporary. Windows will normally restore driver signature enforcement after a regular restart.
If you need a more persistent configuration, Windows also provides command-line options through BCDEdit. Because these commands modify boot configuration data, they should be used carefully.
In this guide, you will learn how to enable or disable Driver Signature Enforcement on Windows 11 using several Windows recovery and startup options.
Enable or Disable Driver Signature Enforcement (DSE) on Windows 11
To enable or disable Driver Signature Enforcement in Windows 11, you can use the Advanced Startup options:
- Open Settings > System > Recovery.
- Select Advanced startup > Restart now.
- Choose Troubleshoot > Advanced options > Startup Settings.
- Select Restart.
- Press 7 or F7 to disable driver signature enforcement temporarily.
- Restart Windows normally when you want Driver Signature Enforcement to return to its normal protected state.
Step 1: Open Windows 11 Recovery Settings
Start by opening the Windows Settings app. You can do this by selecting Start > Settings, or by pressing Windows + I on your keyboard.
Once Settings opens, select System from the left side of the window. Scroll down until you find Recovery, and then select it.
Look for the Advanced startup section. You should see an option labeled Restart now. This option restarts your computer and opens the Windows Recovery Environment, where you can access advanced troubleshooting and startup controls.
Select Settings > System > Recovery > Advanced startup > Restart now.
Before continuing, save any open documents and close applications because your computer will restart.
Step 2: Open Startup Settings
After Windows restarts, you will see the Choose an option recovery screen. Select Troubleshoot to continue.
On the next screen, choose Advanced options. Windows will display several recovery tools that can be used to troubleshoot startup and system problems.
Select Startup Settings. If you do not immediately see this option, look for additional recovery options or select See more recovery options, depending on your Windows 11 configuration.
Select Troubleshoot > Advanced options > Startup Settings.
You will then see information explaining that changing startup settings can modify how Windows starts. Select Restart to continue.
Step 3: Temporarily Disable Driver Signature Enforcement
After the computer restarts again, Windows will display the Startup Settings menu. This menu contains several numbered startup options.
Find the option named Disable driver signature enforcement. In most Windows 11 installations, this option is associated with number 7 or the F7 key.
Press 7 on your keyboard, or press F7, to select it.
Windows 11 will now start normally, but Driver Signature Enforcement will be temporarily disabled for this startup session.
Select Settings > System > Recovery > Advanced startup > Restart now > Troubleshoot > Advanced options > Startup Settings > Restart > 7/F7.
You can now attempt to install or test the driver that Windows previously blocked. Remember that disabling DSE reduces one of Windows’ protections, so only use this mode when you have a specific reason to do so.
Step 4: Install or Test the Required Driver
Once Windows 11 starts, perform the driver-related task that required DSE to be disabled.
For example, you might install an older driver for a device that is no longer supported by its manufacturer. You might also be testing a driver during development or troubleshooting a specific hardware compatibility problem.
Before installing anything, make sure you know where the driver came from. An unsigned driver from an unknown source can create security and stability risks.
Use the manufacturer’s installation program or Device Manager when appropriate. You can open Device Manager by right-clicking Start > Device Manager.
If Windows accepts the driver while DSE is temporarily disabled, complete the installation and test the hardware. If the device works correctly, restart your computer normally.
Step 5: Enable Driver Signature Enforcement Again
The easiest way to restore normal DSE protection is simply to restart Windows 11 normally.
Select Start > Power > Restart and allow Windows to boot normally. In the temporary Startup Settings method, driver signature enforcement is generally restored automatically during the next normal startup.
After restarting, Windows will once again enforce its normal driver-signing requirements.
If your driver stops working after DSE is restored, that may indicate that the driver is not properly signed or is incompatible with your current version of Windows 11.
Step 6: Disable Driver Signature Enforcement Using BCDEdit
Advanced users can also modify the Windows boot configuration with BCDEdit. This method is more persistent than selecting F7 from Startup Settings, so beginners should use it carefully.
Open the Start menu, type Command Prompt, right-click it, and select Run as administrator.
At the elevated Command Prompt, you can use the following command:
bcdedit /set testsigning on
This enables Test Mode, which is designed primarily for driver testing and development. Windows may display a Test Mode watermark after this setting is enabled.
Restart your computer after applying the change.
To turn Test Mode off again, open Command Prompt as administrator and enter:
bcdedit /set testsigning off
Then restart Windows.
You may also encounter the nointegritychecks BCDEdit setting when researching DSE. Because changing boot security settings can weaken Windows protections and may interact with other security features, the Startup Settings F7 method is generally preferable for a one-time driver installation.
Step 7: Verify That the Driver Is Working Correctly
After restarting Windows, check whether your hardware is functioning normally.
Open Start > Device Manager and locate the relevant hardware category. Expand it and select your device.
Right-click the device and choose Properties. Check the General tab for the device status. If Windows reports that the device is working properly, the driver may have installed successfully.
You can also open the Driver tab to review information such as the driver provider, driver date, version, and other details.
If you see a warning icon or an error message, the driver may still be incompatible, corrupted, outdated, or incorrectly installed. In that situation, disabling DSE again may not solve the underlying problem.
FAQs
What is Driver Signature Enforcement in Windows 11?
Driver Signature Enforcement is a Windows security feature that checks digital signatures on kernel-mode drivers. It helps Windows determine whether a driver comes from an identifiable publisher and whether it has been modified after signing.
Is it safe to disable Driver Signature Enforcement?
Temporarily disabling DSE for a specific troubleshooting or driver-testing task can be appropriate. However, it reduces an important Windows security protection. You should avoid leaving security protections disabled unnecessarily and should only install drivers from sources you trust.
Does pressing F7 permanently disable DSE?
No. Using F7 from Startup Settings normally disables driver signature enforcement only for that particular startup session. A normal restart restores the standard enforcement behavior.
Why does Windows 11 block my driver?
Windows can block a driver because it is unsigned, improperly signed, incompatible, outdated, or otherwise not accepted by the current Windows security requirements. Hardware manufacturers may also stop supporting older drivers on newer Windows versions.
Can I enable DSE again?
Yes. If you used the temporary Startup Settings > Disable driver signature enforcement option, simply restart Windows normally. If you changed a persistent boot configuration setting, you should reverse that setting and restart the computer.
Should I use BCDEdit or Startup Settings?
For most beginners, Startup Settings is the simpler choice because the change is temporary. BCDEdit is more appropriate for advanced troubleshooting and driver-development scenarios where you understand the consequences of changing boot configuration settings.