Solved F8 driver signature check bypass

---

In the "Understanding Device Drivers" video you guys mentioned the F8 temporary bypass option for checking driver signature.

can you clarify this point a little bit?

If I have an unsigned driver that I wanted to insert into the driver store, could I add it to the driver store anyway? Will windows only complain when that driver is actually needed? Or does windows check before adding it to the driver store?

This second question I guess depends on the answer to my first question in that if I temporarily bypass driver signature check and add an unsigned driver to the store, upon reboot will I still need to bypass driver sig check to use that driver I installed in the store?

@Daniel-Espinal,

This is a temporary test solution that will allow you to troubleshoot whether or not your unsigned driver is the issue that you're facing.

On reboot, the driver signing will be checked again.

You'll need to permanently disable this check from the command line in administrative mode :

bcdedit.exe -set loadoptions DDISABLE_INTEGRITY_CHECKS
bcdedit.exe -set TESTSIGNING ON

or

using group policy:

User Configuration -> Administrative Templates -> System -> Driver Installation -> Code signing for drivers

Well for security reasons I would never want to permanently turn off driver signing checks. I think it was mentioned that a better solution would be to add a self signed certificate for that particular driver I deemed worthy to the trusted certificate store.

But that's interesting, every time the computer is booted the drivers ( before being used ) are checked?

@Daniel-Espinal,

It's part of secure boot. Yep. This make sure that someone or something didn't tamper with your drivers in between your bootup!