Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteWindows 11 normally blocks kernel-mode drivers that do not have a signature Windows can verify. For a one-time install or test, use Startup Settings to temporarily disable Driver Signature Enforcement for the current session; for driver development, use TESTSIGNING with a properly test-signed driver.
These options do not make every unsigned driver installable. In particular, automated Plug and Play installation still requires a signed driver package catalog file, and Memory Integrity (HVCI) requires a test signature for test drivers.
Use Startup Settings for a one-time change
This is the simplest method when you need Windows to start once without normal driver-signature enforcement. It applies only to the current session and does not persist after a restart.
- Open Settings.
- Go to System → Recovery.
- Under Advanced startup, select Restart now.
- After the computer reboots, select Choose an option → Troubleshoot → Advanced options → Startup Settings.
- Select Restart.
- When the numbered Startup Settings screen appears, press 7 or F7 for Disable Driver Signature Enforcement.
Windows will start with the option enabled for that session. Install or test the driver, then restart normally when finished. The next restart restores the default enforcement behavior.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
- KEYBOARD: The keyboard works for Windows with hot keys that enable easy access to Media, My Computer, Mute, Volume up/down, and Calculator
- EASY SETUP: Experience simple installation with the USB wired connection
- VERSATILE COMPATIBILITY: This keyboard is designed to work with multiple Windows versions, including Vista, 7, 8, 10 offering broad compatibility across devices.
- SLEEK DESIGN: The elegant black color of the wired keyboard complements your tech and decor, adding a stylish and cohesive look to any setup without sacrificing function.
- FULL-SIZED CONVENIENCE: The standard QWERTY layout of this keyboard set offers a familiar typing experience, ideal for both professional tasks and personal use.
What this option does—and does not do
The Startup Settings option temporarily relaxes load-time enforcement so you can work with a driver Windows would otherwise reject. It does not permanently change a security setting or remove every driver-installation requirement.
Automated Plug and Play installation still requires a signed driver package catalog file. Disabling load-time enforcement does not make a completely unsigned PnP package installable on modern Windows.
Enable persistent Test Mode for driver development
If you are developing or repeatedly testing a kernel-mode driver, Windows provides the TESTSIGNING boot option. This change persists across restarts until you turn it off. BCDEdit must be run from an elevated Command Prompt by a member of the local Administrators group.
BCDEdit modifies the Boot Configuration Data store. Some changes can affect booting, so save your work and follow the commands carefully.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Rank #2
- Reliable Plug and Play: The USB receiver provides a reliable wireless connection up to 33 ft (1), so you can forget about drop-outs and delays and you can take it wherever you use your computer
- Type in Comfort: The design of this keyboard creates a comfortable typing experience thanks to the low-profile, quiet keys and standard layout with full-size F-keys, number pad, and arrow keys
- Durable and Resilient: This full-size wireless keyboard features a spill-resistant design (2), durable keys and sturdy tilt legs with adjustable height
- Long Battery Life: MK270 combo features a 36-month keyboard and 12-month mouse battery life (3), along with on/off switches allowing you to go months without the hassle of changing batteries
- Easy to Use: This wireless keyboard and mouse combo features 8 multimedia hotkeys for instant access to the Internet, email, play/pause, and volume so you can easily check out your favorite sites
- Open Windows Search and type cmd.
- Right-click Command Prompt and select Run as administrator.
- Run this command: Bcdedit.exe -set TESTSIGNING ON
- Restart Windows.
When the change succeeds, Windows displays a Test Mode watermark in the lower-right corner of the desktop. It indicates that test-signing mode is active.
BCDEdit syntax and the current boot entry
BCDEdit’s general form is bcdedit /set [{ID}] datatype value. If you omit the identifier, BCDEdit changes the current operating-system boot entry, identified as {current}. In PowerShell, quote the identifier when specifying it explicitly: bcdedit /set “{current}” testsigning on.
Turn Test Mode off
When testing is complete, open an elevated Command Prompt and run Bcdedit.exe -set TESTSIGNING OFF. Then restart Windows. The Test Mode watermark should disappear, and normal driver-signature behavior will return.
Important limitations with test-signing
TESTSIGNING does not accept every unsigned driver
TESTSIGNING ON is not the same as allowing completely unsigned kernel-mode code. Every driver image still needs a digital signature, though the certificate does not have to chain to a trusted root certification authority.
Rank #3
- All-day Comfort: The design of this standard keyboard creates a comfortable typing experience thanks to the deep-profile keys and full-size standard layout with F-keys and number pad
- Easy to Set-up and Use: Set-up couldn't be easier, you simply plug in this corded keyboard via USB on your desktop or laptop and start using right away without any software installation
- Compatibility: This full-size keyboard is compatible with Windows 7, 8, 10 or later, plus it's a reliable and durable partner for your desk at home, or at work
- Spill-proof: This durable keyboard features a spill-resistant design (1), anti-fade keys and sturdy tilt legs with adjustable height, meaning this keyboard is built to last
- Plastic parts in K120 include 51% certified post-consumer recycled plastic*
If Memory Integrity, also called HVCI, is enabled, Windows 10 version 1507 and later—including Windows 11—does not load an unsigned binary merely because test-signing is enabled. The binary must be test-signed with a test certificate.
Test-signing is different from nointegritychecks
Microsoft documents nointegritychecks as a separate BCD option that disables integrity checks. To enable it, use bcdedit /set nointegritychecks on; to restore it, use bcdedit /set nointegritychecks off.
This option is separate from TESTSIGNING and cannot be set while Secure Boot is enabled. It reduces boot security and should not be used casually or left enabled after testing.
Fix the Secure Boot policy error
If BCDEdit returns “The value is protected by Secure Boot policy and cannot be modified or deleted,” Secure Boot is preventing the BCD change. Microsoft’s documented resolution is to restart into the computer’s UEFI/BIOS firmware settings and disable Secure Boot, then retry the command.
Rank #4
- 【Dreamy Rainbow Gaming Keyboard】K521 Gaming Keyboard Adopts a Different LED Backlight Design, Upgraded on the Traditional LED Backlight Effect, Making the Light More Penetrating, Giving You a More Dazzling Visual Effect, Making Your Gaming Process More Enjoyable
- 【One Touch Opens & Visual Feast】The K521 Red Dragon Keyboard has a One-Touch on/off Lighting Button for Added Convenience. It also has a Three-Position Adjustable Breathing Mode and a Four-Position Adjustable Brightness Lighting Mode
- 【Mechanical Feeling & Fast Tapping】The PC Keyboard Keys are Designed for Mechanical Feeling, Giving You a Better Feel During Use and the Ability to Trigger Keys Quickly, Allowing You to Win All Your Games
- 【19 Keys Anti-Ghosting Keyboard】Anti-Ghosting Ensures Every Button Can Be Triggered. This Allows You to Trigger Key Combinations In The Game Accurately, And Each Skill Can Be Accurately Released to Increase Your Winning Rate. Redragon K521 Will Be Your Perfect Partner
- 【12 Multimedia Combination Keys】The K521 Wired Gaming Keyboard is Equipped with 12 Multimedia Keys That Can Greatly Enhance Your Gaming/Office Efficiency and Make It More Convenient to Use
BitLocker can also prevent or complicate boot-configuration changes. Before changing firmware or boot-security settings, make sure you have the BitLocker recovery key and handle BitLocker according to your device-management situation. Restore Secure Boot and BitLocker protection where possible after testing.
Why F8 is not the recommended Windows 11 method
Pressing F8 during startup is not a dependable normal-boot method on current Windows 11 installations. With the standard boot-menu policy, Windows ignores F8 during boot, and modern systems start too quickly for traditional F8 timing to be reliable.
Use Settings → System → Recovery → Advanced startup instead. Microsoft also recommends Startup Settings or System Configuration (MSConfig.exe) when possible, because some BCDEdit changes can make a computer unbootable.
Which method should you use?
| Goal | Recommended method | Does it persist? | Main limitation |
|---|---|---|---|
| Install or test a driver once | Startup Settings → Disable Driver Signature Enforcement | No; current session only | Does not remove all PnP catalog-signing requirements |
| Repeatedly develop a test-signed driver | Bcdedit.exe -set TESTSIGNING ON | Yes, until switched off | Driver images still need signatures; HVCI requires test signing |
| Disable integrity checks | bcdedit /set nointegritychecks on | Yes, until switched off | Separate, higher-risk setting; unavailable with Secure Boot enabled |
Security checklist
- Use the temporary Startup Settings option whenever it meets your needs.
- Download drivers only from the hardware manufacturer or a source you trust.
- Do not leave TESTSIGNING or nointegritychecks enabled after testing.
- Restore Secure Boot after any required firmware change.
- Keep a BitLocker recovery key available before modifying boot or firmware settings.
- If Windows still rejects the driver, check whether the driver is properly test-signed and whether Memory Integrity/HVCI is blocking it.
FAQ
Is Disable Driver Signature Enforcement permanent in Windows 11?
No. The Startup Settings option applies only to the current Windows session. Restart the computer normally to return to the default enforcement behavior.
Best Value
- All-day Comfort: This USB keyboard creates a comfortable and familiar typing experience thanks to the deep-profile keys and standard full-size layout with all F-keys, number pad and arrow keys
- Built to Last: The spill-proof (2) design and durable print characters keep you on track for years to come despite any on-the-job mishaps; it’s a reliable partner for your desk at home, or at work
- Long-lasting Battery Life: A 24-month battery life (4) means you can go for 2 years without the hassle of changing batteries of your wireless full-size keyboard
- Simply plug the USB receiver into a USB port on your desktop, laptop or netbook computer and start using the keyboard right away without any software installation
- Simply Wireless: Forget about drop-outs and delays thanks to a strong, reliable wireless connection with up to 33 ft range (5); K270 is compatible with Windows 7, 8, 10 or later
What is the correct Startup Settings name?
The Microsoft label is Disable Driver Signature Enforcement. “Disable driver signing” is a commonly used shorthand, but it is not the exact menu label.
Does TESTSIGNING allow a completely unsigned driver?
No. Test-signing mode still requires each driver image to have a digital signature. The signature can use a test certificate rather than one chaining to a trusted public root.
Why does my test-signed driver still fail with Test Mode enabled?
Memory Integrity/HVCI may be enabled. On Windows 11, HVCI does not load an unsigned binary simply because TESTSIGNING is on; the binary must be properly test-signed with a test certificate.
What should I do if BCDEdit says the value is protected by Secure Boot policy?
Secure Boot is blocking the BCD change. Enter the UEFI/BIOS settings and disable Secure Boot if your testing situation permits it, then retry. BitLocker may also need to be suspended or otherwise handled before changing boot settings.
Is Windows 11 Home different from Pro for these procedures?
The cited Microsoft driver-signing documentation does not identify a Home-versus-Pro difference for these Startup Settings and BCDEdit procedures.
The Bottom Line
For a one-time driver installation, use Settings → System → Recovery → Advanced startup → Restart now, then choose Troubleshoot → Advanced options → Startup Settings → Restart and press 7 or F7. For ongoing driver development, use elevated BCDEdit with TESTSIGNING ON, then turn it off with TESTSIGNING OFF when finished. Neither approach permits arbitrary unsigned kernel code.
