Skip to main content
Cover image for disable-driver-signature-enforcement guide

Fixing driver signature enforcement errors in Windows 11

Windows 11 blocks unsigned drivers with a signature error. What triggers it, when test-signing mode is appropriate, and safer alternatives to try first.

By Sarah Jenkins Updated 2024-03-01Reviewer: author-1 (2024-05-11)

You try to install a driver on Windows 11 and instead of a working device you get a blunt refusal: the system won't load code it can't verify. That single wall stops many people cold, especially on newer machines where extra security features make the block more aggressive than it was on older PCs. Before you reach for any bypass, there are calmer fixes that solve the problem outright and keep your protection intact. This walkthrough shows the errors you'll see, why Windows 11 triggers them so often, and what to try in order.

  1. 1

    Read the exact error you're getting

    The wording tells you a lot. "Windows cannot verify the digital signature for the drivers required for this device" with Code 52 in Device Manager points squarely at a signature problem. "Windows requires a digitally signed driver" during setup means the installer's file lacks a trusted signature. A blue-screen mentioning DRIVER_VERIFIER or a boot loop after an install is different and more serious. Note the precise text and any code number before doing anything else, because a signature error and a hardware or compatibility error look similar on the surface but need completely different fixes.

  2. 2

    Know why Windows 11 is stricter

    Windows 11 ships with two features that older systems often lacked: Secure Boot and Memory Integrity (a part of Core Isolation). Secure Boot refuses to load boot-level components that aren't signed by a trusted authority. Memory Integrity runs driver code in a protected environment and rejects drivers that don't meet stricter compatibility rules, even some that installed fine on Windows 10. So a driver you used for years may suddenly be blocked. Recognizing this matters, because the real culprit is sometimes one of these features clashing with an older driver, not the driver being genuinely unsafe.

  3. 3

    Look for a properly signed version first

    The cleanest fix is a driver that Windows trusts. Check your laptop or motherboard maker's official support page for a current package built for Windows 11, since vendors often re-sign or rebuild older drivers to meet the new rules. Also open Settings, go to Windows Update, click Advanced options, then Optional updates, and look under Driver updates; Microsoft frequently distributes signed drivers there. If a signed release exists, installing it removes the error entirely with zero loss of security. Only move on if no signed version is available anywhere official.

  4. 4

    Try turning off Memory Integrity

    If a signed driver installs but the device still won't start, Memory Integrity may be rejecting it for compatibility. Open Settings, go to Privacy & security, then Windows Security, open Device security, and click Core isolation details. If Memory Integrity refuses to turn on and names a driver, that same incompatibility can block the device. Toggling Memory Integrity off and restarting sometimes lets an otherwise-legitimate driver load. This is a smaller compromise than disabling signature checks globally, and you should turn it back on once the vendor ships an updated, compatible driver.

  5. 5

    Check whether Secure Boot is the blocker

    For boot-level or low-level drivers, Secure Boot can be the thing saying no. You can see its status by opening the Start menu, typing msinfo32, and reading the Secure Boot State line in System Information. Don't rush to disable it. Turning Secure Boot off weakens boot protection and, on a BitLocker-encrypted drive, will trigger a recovery-key prompt, so locate that key first. Treat this only as a diagnostic clue for now; if disabling it is truly necessary, that's a deliberate firmware change you make knowingly, not a casual toggle.

  6. 6

    Use a temporary bypass only as a last resort

    If no signed driver exists and the hardware is genuinely irreplaceable, load it once with enforcement relaxed. Open Settings, go to System, then Recovery, and choose Restart now under Advanced startup. Pick Troubleshoot, Advanced options, Startup Settings, Restart, then press 7 for "Disable driver signature enforcement." Install the driver during that single session. Enforcement returns on the next normal reboot, so this doesn't leave your PC exposed long term. Create a restore point beforehand, and understand you're vouching for a driver Windows couldn't verify.

  7. 7

    Restore full protection and confirm

    After the fix, put your defenses back. If you turned off Memory Integrity, re-enable it once a compatible driver is available. If you disabled Secure Boot in firmware, turn it back on and let BitLocker resume normally. Reboot and open Device Manager to confirm the device shows no yellow warning and reports "This device is working properly" on its Properties General tab. Keep an eye on your vendor's support page for an updated package so you can eventually run the hardware with every security feature switched on again.

Related Drivers