Disable driver signature enforcement on Win 7 x64

Hi,

I am having trouble disabling digital driver signing enforcement in Windows 7 64-bit. I’ve tried pressing F8 and selecting the option at boot, as well as the 2 commands:

bcdedit -set loadoptions DISABLE_INTEGRITY_CHECKS

bcdedit -set TESTSIGNING ON

With no luck, I still can’t start my driver. How do I disable driver signature enforcement on Windows 7 64-bit?

Thanks

> I am having trouble disabling digital driver signing enforcement in Windows

7 64-bit. I’ve tried pressing F8 and selecting the option at boot, as well
as the 2 commands:

bcdedit -set loadoptions DISABLE_INTEGRITY_CHECKS

bcdedit -set TESTSIGNING ON

With no luck, I still can’t start my driver. How do I disable driver
signature enforcement on Windows 7 64-bit?

Thanks

Are you sure a lack of embedded signature is your problem? What error code are you getting?

Tim.

What error did you get? Is your driver 64-bit too? How do you install
driver? Maybe problem with driver location (C:\Windows\System32\drivers vs
C:\Windows\SysWOW64\drivers)?

Best regards,
Krystian Bigaj

On 11 August 2011 16:49, wrote:

> Hi,
>
> I am having trouble disabling digital driver signing enforcement in Windows
> 7 64-bit. I’ve tried pressing F8 and selecting the option at boot, as well
> as the 2 commands:
>
> bcdedit -set loadoptions DISABLE_INTEGRITY_CHECKS
>
> bcdedit -set TESTSIGNING ON
>
>
> With no luck, I still can’t start my driver. How do I disable driver
> signature enforcement on Windows 7 64-bit?
>
> Thanks
>

On Thu, Aug 11, 2011 at 3:49 PM, wrote:
> I am having trouble disabling digital driver signing enforcement in Windows 7 64-bit. ?I’ve tried pressing F8 and selecting the option at boot, as well as the 2 commands:
Have you checked setupapi logs?

Btw. you can disable signature checks by connecting kernel debugger
(very handy during development).

Kris

I am getting error code 577. I build my driver for Windows 7 Checked 64-bit and it’s located in the C:\ because that’s were it loads from the usermode code.

Maybe a silly (obvious?) question, is your driver signed with test cert?
http://www.osronline.com/article.cfm?article=465

“When in test signing mode, x64 kernel-mode code signing will still be
required, but Windows will not check…”

I know that first you asked “How do I disable driver signature enforcement
on Windows 7 64-bit?”, but I’m not sure if this is possible (easily) - also
I’ve never needed it (not sure if you really need it too - just sign with
test cert if not signed before).

Best regards,
Krystian Bigaj

On 11 August 2011 17:58, wrote:

> I am getting error code 577. I build my driver for Windows 7 Checked
> 64-bit and it’s located in the C:\ because that’s were it loads from the
> usermode code.
>
>

My driver is not signed with a test cert. I usually just press F8 before start up and select “disable driver signing enforcement” and that allows me to load the driver.

Do you have a debugger connected?

Does you driver start at boot time, and if so, did you set boot debug to ON in BCDEDIT?

Peter
OSR

I don’t have a debugger connected. My driver does not start at boot time.

Well… If you just hook up the debugger, you’ll be fine.

Also, you enabled test signing but you’re not test signing your drivers.

So, shut off test signing… And use F8 to disable signature checks. OR hook up the de utter.

Peter
OSR

> I am having trouble disabling digital driver signing enforcement in Windows 7 64-bit. I’ve tried pressing F8 and

selecting the option at boot

This works.


Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com

>C:\Windows\SysWOW64\drivers)

There is no such thing at all, 32bit .sys files just plain cannot be loaded on Win64.


Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com

> Do you have a debugger connected?

F8 alone is enough to switch off the check.


Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com