How to Enable Driver Signature Enforcement in Windows 11: A Guide

If you’ve ever tried installing unsigned or modified drivers on Windows 11, you may have seen warnings or errors. That’s because Windows uses a feature called Driver Signature Enforcement. It ensures that all drivers installed on your system are digitally signed by Microsoft or the hardware manufacturer, keeping your PC secure and stable.

In this guide, we’ll explain what driver signature enforcement is, why it matters, and how you can enable it in Windows 11 step by step.

Table of Contents

Key Takeaways

Driver Signature Enforcement prevents unsigned or unsafe drivers from running.
It is enabled by default in Windows 11, but some users may disable it for testing purposes.
You can re-enable it using Command Prompt, Group Policy, or Advanced Boot options.
Always enable this feature if you want to keep your system secure and stable.

What Is Driver Signature Enforcement in Windows 11?

Think of drivers as translators between your hardware (like graphics cards, printers, or keyboards) and Windows. If these translators are faulty or malicious, your PC could crash or become vulnerable.

Driver Signature Enforcement ensures only signed and verified drivers are installed, reducing the risk of:

System crashes (blue screens)
Malware hidden inside drivers
Hardware not working correctly

Why Enable Driver Signature Enforcement?

You should enable it because:

✅ It keeps your system secure from untrusted drivers.
✅ It prevents stability issues caused by unofficial drivers.
✅ It ensures compatibility with future Windows updates.

The only reason to disable it is when testing custom or unsigned drivers — but for everyday users, enabling it is the safest option.

How to Check If Driver Signature Enforcement Is Enabled

Before enabling, you may want to check its status.

Steps:

Press Windows + R, type msinfo32, and hit Enter.
In the System Information window, scroll down.
Look for Test Mode:
- If you see “Test Mode” → enforcement is disabled.
- If there’s no mention → enforcement is enabled.

Methods to Enable Driver Signature Enforcement in Windows 11

You can use several methods depending on your preference:

Method 1: Enable via Command Prompt

Press Start, type cmd, right-click Command Prompt, and select Run as administrator.
Type the following command and press Enter:

bcdedit /set nointegritychecks off
Restart your PC.

✅ This ensures Windows blocks unsigned drivers.

Method 2: Enable via Group Policy Editor (Windows 11 Pro/Enterprise)

⚠️ Note: Group Policy Editor is not available in Windows 11 Home edition.

Press Windows + R, type gpedit.msc, and hit Enter.
Navigate to:

User Configuration > Administrative Templates > System > Driver Installation
Double-click Code signing for device drivers.
Choose Enabled.
Under When Windows detects a driver file without a digital signature, select Block.
Click Apply → OK → Restart PC.

Method 3: Enable via Advanced Boot Options

If you temporarily disabled signature enforcement during boot, here’s how to fix it:

Press Windows + I → go to System > Recovery.
Under Advanced startup, click Restart now.
Select Troubleshoot > Advanced options > Startup Settings.
Click Restart.
On the options screen, press the key for Enable Driver Signature Enforcement.

Method 4: Disable Test Mode (If Active)

If your PC is in Test Mode, enforcement is automatically off.

Steps:

Open Command Prompt (Admin).
Type:

bcdedit /set testsigning off
Restart your PC → Test Mode watermark should disappear.

Table: Quick Overview of Methods

Method	Best For	Difficulty
Command Prompt	Fastest, works on all editions	Easy
Group Policy	Pro/Enterprise users	Medium
Advanced Boot	If temporarily disabled	Easy
Test Mode Fix	Developers who enabled testing	Easy

Common Issues and Fixes

Problem 1: Can’t install a driver after enabling enforcement.

Solution: Only install official signed drivers from the manufacturer.

Problem 2: Group Policy not available (Home Edition).

Solution: Use Command Prompt or Advanced Boot method.

Problem 3: Enforcement keeps turning off.

Solution: Check for third-party software or scripts that may be forcing test mode.

Conclusion

Enabling Driver Signature Enforcement in Windows 11 is one of the simplest ways to secure your PC. By making sure only verified drivers are installed, you protect your system from crashes, vulnerabilities, and malware.

Unless you’re a developer testing custom drivers, you should always keep this feature enabled. Use Command Prompt, Group Policy, or Advanced Boot options depending on your Windows edition — and your PC will stay safer and more stable.

FAQs

1. Is Driver Signature Enforcement enabled by default in Windows 11?
Yes, it’s enabled by default. But if you’ve previously disabled it, you may need to re-enable it manually.

2. Can I install unsigned drivers with Driver Signature Enforcement on?
No — you must disable it temporarily to install unsigned drivers.

3. Will enabling enforcement affect gaming drivers?
No — official drivers from NVIDIA, AMD, or Intel are signed and will work fine.

4. What is Test Mode in Windows 11?
It’s a special mode where driver signature checks are disabled, mainly for developers.

5. Can malware bypass Driver Signature Enforcement?
It’s rare, but some advanced malware can. Keeping Windows updated is the best defense.