Device Drivers are necessary for communication between hardware and software of an operating system. Some drivers are digitally signed. Digitally signed drivers are drivers signed by their issuing authority in a manner that the end user or any third party cannot modify. At times, users are facing errors like Windows requires a digitally signed driver or A digitally signed driver is required. Let’s see how we can get rid of the error.
Driver Signing is associating a digital signature with a driver package. Windows device installations use digital signatures to verify the integrity of the driver packages and to validate the identity of the vendor who provides the driver packages.
The drivers you normally install on your computer from Windows Update, Original Equipment Manufacturers, or some third-party driver download software, etc. must be digitally verified by Microsoft via a digital signature. It is an electronic security mark that certifies the publisher of the driver and all the relevant information related to it. If a driver isn’t certified by Microsoft, Windows won’t run them on either 32-bit or 64-bit system. This is referred to as “driver signature enforcement”.
Windows 11/10 will load only Kernel mode drivers signed digitally by the Dev Portal. However, the changes will affect only the new operating system installations with Secure Boot on. The non-upgraded fresh installations would require drivers signed by Microsoft.
Windows requires a digitally signed driver
When you see Windows requires a digitally signed driver or A digitally signed driver is required error, it means that the driver you are trying to install or update hasn’t been digitally signed by the issuing authority. Thus you wouldn’t be able to use it. The solutions to this problem are as follows:
- Update the drivers from the manufacturer’s website
- Disable driver signing using Group Policy Editor
Let’s get into the details of each method.
1] Update the drivers from the manufacturer’s website
The reason you face this problem in the first place is that you might have downloaded the drivers from an external media or the drivers weren’t updated in a while, and the issuing authority changed its policies.
To fix it, you need to download the latest drivers from the manufacturer’s website and install them manually.
If this doesn’t work, the only option you would have is to disable the driver signing or its recognition in Windows 11/10. However, this isn’t recommended so proceed with it only if you think you need to use the affected hardware.
Read: How to identify unsigned drivers using sigverif utility
2] Disable driver signing through the group policy editor
To disable Driver Signature enforcement, press Win + R to open the Run window and type the command gpedit.msc. Press Enter to open the Group Policy Editor.
Navigate to the following path:
User configuration > Administrative templates > System > Driver installation.
On the right side pane, double-click on the entry Code signing for device drivers to open its properties.
Select the radio button beside Enabled for this policy.
Select Ignore from the dialogue box for When Windows detects a file without drivers.
Click on OK to save the settings and restart the system.
This setting determines how the system responds when a user tries to install device driver files that are not digitally signed. It establishes the least secure response permitted on the systems of users in the group. Users can use System in the Control Panel to select a more secure setting, but when this setting is enabled, the system does not implement any setting less secure than the one the setting established.
When you enable this setting, use the drop-down box to specify the desired response.
- “Ignore” directs the system to proceed with the installation even if it includes unsigned files.
- “Warn” notifies the user that files are not digitally signed and lets the user decide whether to stop or proceed with the installation and whether to permit unsigned files to be installed. “Warn” is the default.
- “Block” directs the system to refuse to install unsigned files. As a result, the installation stops, and none of the files in the driver package are installed.
To change driver file security without specifying a setting, use System in the Control Panel. Right-click My Computer, click Properties, click the Hardware tab, and then click the Driver Signing button.
This will make the warning go away. But you have to remember that this makes your system ‘less secure’.
Also read:
- Windows can’t verify the publisher of this driver software
- The third-party INF does not contain digital signature information
- No signature was present in the subject
How do I fix a digitally signed driver is required?
When you see a digitally signed driver is required or Windows requires a digitally signed error on your Windows PC, you need to make sure you are installing the drivers from trusted sources. Download the drivers from the manufacturer’s website or install them via a third program.
Related read: Driver Signing Changes in Windows.
