What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Windows does not treat every “unsigned driver” the same way. An INF package may lack a trusted catalog signature, while the kernel-mode driver inside it may still have to contain a valid digital signature before Windows will load it.
For a one-time test, use Disable Driver Signature Enforcement from Windows Recovery Environment. For driver development, use a properly test-signed driver with Windows Test Mode. On a normal computer, the safest solution is still to obtain a compatible, release-signed driver from Windows Update or the device manufacturer.
Before installing an unsigned driver
Only install a driver from a source you trust. A kernel driver runs with highly privileged access to Windows, so a modified or malicious driver can compromise the entire system.
Before continuing, create a restore point or make sure you can reach Windows Recovery Environment. If BitLocker is enabled and you change Secure Boot settings, keep your BitLocker recovery key available.
#1 Best Overall
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
There are also two important limits:
- A genuinely unsigned kernel-mode driver is not automatically made valid by enabling Test Mode.
- Memory integrity, Secure Boot, driver compatibility rules, and Microsoft’s vulnerable-driver blocklist can still prevent a driver from loading.
Choose the right installation method
| Situation | Use this method | What it changes |
|---|---|---|
| Testing a driver once | Startup Settings > Disable Driver Signature Enforcement | Applies to the current boot only |
| Developing or testing a test-signed driver | bcdedit /set testsigning on |
Enables Test Mode until you turn it off |
| Installing an INF package | Device Manager or PnPUtil | Adds and installs the driver package |
Method 1: Disable Driver Signature Enforcement for one boot
This is the least persistent option. Windows returns to its normal signature policy after the next restart.
Windows 11 and Windows 10 steps
- Open Settings.
- In Windows 11, go to System > Recovery. In Windows 10, go to Update & Security > Recovery.
- Next to Advanced startup, select Restart now.
- At Choose an option, select Troubleshoot.
- Select Advanced options > Startup Settings.
- Select Restart.
- When the numbered list appears, press 7 or F7 for Disable Driver Signature Enforcement.
After Windows starts, install the driver during that session. You can use Device Manager or PnPUtil, as described below.
You can reach the same recovery menu by holding Shift while selecting Power > Restart, then choosing Troubleshoot > Advanced options > Startup Settings > Restart.
This is a one-boot workaround, not a permanent setting. The old advice to press F8 during every startup is outdated on most modern Windows installations.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Method 2: Enable Windows Test Mode
Test Mode is intended for driver development and repeated testing. It is not a method for making an arbitrary, completely unsigned kernel driver safe to load. The driver image or its catalog must be properly test-signed.
Turn on Test Mode
- Open Start and type Command Prompt.
- Right-click Command Prompt and select Run as administrator.
- Run this command:
bcdedit /set testsigning on- Restart Windows:
shutdown /r /t 00The setting takes effect only after a restart. When Test Mode is active, Windows normally displays a Test Mode watermark on the desktop.
Turn off Test Mode
When testing is complete, open an elevated Command Prompt and run:
bcdedit /set testsigning off
shutdown /r /t 00BCDEdit changes the boot configuration. Use the commands exactly as shown; incorrect boot configuration changes can affect whether Windows starts.
Recommended Free Tools
Rank #2
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
If Secure Boot blocks Test Mode
If BCDEdit displays:
The value is protected by Secure Boot policy and cannot be modified or deleted.Secure Boot is preventing the change. Microsoft’s documented approach is to restart into UEFI firmware settings and temporarily disable Secure Boot before enabling Test Mode.
Disabling Secure Boot reduces platform protection. On a BitLocker-encrypted computer, confirm that you have the recovery key before changing UEFI settings. Re-enable Secure Boot after testing if your hardware and configuration support it.
Install the INF package with PnPUtil
PnPUtil is Windows’ built-in command-line tool for adding driver packages to the Driver Store and attempting to install them on matching devices.
Install one INF file
Open Command Prompt as administrator and run:
pnputil /add-driver "C:PathTodriver.inf" /installFor example:
pnputil /add-driver "C:DriversMyDevicemydevice.inf" /install/add-driver adds the package to the Driver Store. /install attempts to install or update it on a connected device that matches the package.
Install every INF in a folder
pnputil /add-driver "C:Drivers*.inf" /installTo include subfolders, add /subdirs:
pnputil /add-driver "C:Drivers*.inf" /subdirs /installThese options are supported on Windows 10 version 1607 and later, including Windows 11.
Stage the driver without installing it
pnputil /add-driver "C:PathTodriver.inf"Without /install, Windows adds the package to the Driver Store but does not force it onto an existing device.
Request a restart
pnputil /add-driver "C:PathTodriver.inf" /install /rebootPnPUtil does not force a lower-ranked driver to replace the driver currently in use. It can report that a package was added successfully while Windows continues using a better-ranked driver.
Install the driver with Device Manager
Use this method when the download contains an INF file and extracted driver files rather than only an executable installer.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #3
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
- Right-click Start and select Device Manager.
- Expand the category containing the device.
- Right-click the target device and select Update driver.
- Select Browse my computer for drivers.
- Select Browse, choose the folder containing the extracted driver files, and select OK.
- Select Next and follow the prompts.
The package must match the device’s hardware ID, Windows version, and system architecture. A driver for a similar-looking device may not work.
If Device Manager says The best drivers for your device are already installed, Windows may have found the package but rejected it because another driver has a better ranking. That message does not necessarily mean the folder was ignored.
Check Memory Integrity if the driver still will not load
Memory integrity, also called Hypervisor-protected Code Integrity (HVCI), is an additional security layer. With it enabled, an actually unsigned driver binary is not supported, even when Windows is in Test Mode. The binary must be test-signed.
On Windows 11, check the setting here:
Windows Security > Device security > Core isolation details > Memory integrity
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchTo temporarily turn it off, switch Memory integrity to Off and restart the computer. On Windows 10, use:
Start > Settings > Update & Security > Windows Security > Device security > Core isolation details
Disabling Memory integrity weakens protection and requires a restart. Turn it back on after testing. If Windows will not let you re-enable it, the Core isolation page or Code Integrity events will usually identify the incompatible driver. The proper long-term fix is an updated compatible driver, not leaving the security feature disabled.
A signed driver can still be blocked
Digital signing is not the only check Windows performs. Microsoft’s vulnerable-driver blocklist can block a driver that has a valid signature if the driver is known to contain security weaknesses.
Rank #4
- 5 in 1 Connectivity: The USB C Multiport Adapter is equipped with a 4K HDMI port, a 100W USB C PD port, a 5 Gbps USB A data port, and two 480 Mbps USB A ports
The blocklist is enabled by default on Windows 11 version 22H2 and later, and is enforced when Memory integrity, Smart App Control, or S mode is active. Enabling Test Mode does not necessarily bypass this protection.
If a signed driver is blocked as vulnerable, look for a newer version from the manufacturer. Avoid downloading a modified copy or permanently weakening Windows security to keep using an obsolete driver.
Troubleshooting common errors
“Windows cannot verify the digital signature for the drivers required for this device. (Code 52)”
Code 52 means the device did not start because the driver does not comply with Windows kernel-mode signing requirements. Possible causes include:
- The driver is genuinely unsigned.
- The catalog signature does not match the package contents.
- A driver file was changed after signing.
- The package is test-signed but Test Mode is disabled.
- HVCI requires a signature that the driver does not have.
- Secure Boot or another driver policy is blocking it.
“A driver can’t load on this device”
This commonly indicates that Memory integrity is preventing the driver from loading. First check the manufacturer for a newer driver. Only temporarily disable Memory integrity when testing requires it, and restore the setting afterward.
PnPUtil succeeds but the old driver remains active
Check the following:
- You used
/install, rather than only staging the package. - The connected device actually matches the INF.
- Windows did not rank another driver higher.
- A restart is required.
- Code Integrity, HVCI, Secure Boot, or the vulnerable-driver blocklist is blocking the driver after installation.
For installation details, inspect:
%windir%infsetupapi.dev.logThis log can show which INF matched the hardware and why Windows rejected or selected a package.
The driver installs but Windows fails to boot
Boot-start drivers have stricter requirements than ordinary Plug and Play drivers. Installing an INF or using a one-time signature option does not guarantee that a boot-start kernel driver can load during startup.
Enter Windows Recovery Environment through Settings > System > Recovery > Advanced startup > Restart now. Depending on the situation, try Startup Repair, System Restore, Startup Settings, or Command Prompt.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Do not use nointegritychecks as the normal fix
You may find advice to run:
bcdedit /set nointegritychecks onTo restore the setting:
bcdedit /set nointegritychecks offThis option changes boot integrity policy globally, cannot be set while Secure Boot is enabled, and does not solve HVCI or vulnerable-driver blocking. It is also not a replacement for a test-signed driver. For development, use a properly test-signed driver with bcdedit /set testsigning on; for a one-time test, use Startup Settings.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Best Value
- Portable and powerful USB-C HUB: BENFEI USB Type-C HUB, with super-soft and knot-free silicone woven design cable, meets most mobile office needs. Compact, lightweight, stylish, and powerful portable USB C Hub equipped with 1 x HDMI port, 1 x 100W charging, and 3 x USB ports. 18-month warranty, 24-hour response, to ensure you feel at ease when using our product.
- Design centered on comfort and reliability: Thanks to BENFEI's end-to-end in-house cable production capability, in-house PCBA and assembly capability, using the industry's most advanced silicone woven design and process, 20cm cable in length, no knots, super-soft, the HUB is easy to use in all scenarios: laptop, tablet, stand etc. Super-soft, 25000+ life cycles, to meet your daily carrying and office needs.
- 100W Charging: Support up to 90W USB C pass-through charging via Type-C port to keep your laptop powered. 10W is reserved for other interface operations. No data and video function on the Type-C port.
- 4K HDMI Display: The HDMI port supports media display at resolutions up to 4K 30Hz, keeping every incredible moment detailed and ultra vivid. Please note that the C port of the Host device needs to support video output.
- Transfer Files in Seconds: Transfer files and from your laptop at speeds up to 10 Gbps with USB A 3.2 port. Extra 2 USB A 2.0 ports are perfectly for your keyboards and mouse.
Recommended procedure
For a one-time test
- Confirm that the driver came from a trusted source.
- Create a restore point or prepare recovery media.
- Boot to Startup Settings.
- Select Disable Driver Signature Enforcement with 7 or F7.
- Install the INF with Device Manager or
pnputil /add-driver "C:PathTodriver.inf" /install. - Restart normally.
- If it fails, check Device Manager, Core isolation settings, and
%windir%infsetupapi.dev.log.
For driver development
- Test-sign the driver binary or catalog.
- Open an elevated Command Prompt.
- Run
bcdedit /set testsigning on. - Restart Windows.
- Install the package with PnPUtil.
- Test the driver.
- Run
bcdedit /set testsigning offand restart when finished.
For production use, obtain a release-signed driver through Windows Update, the hardware manufacturer, or the appropriate Microsoft Hardware Dev Center signing process. Do not distribute a test-signed or genuinely unsigned kernel driver as if it were a normal production driver.
FAQ
Can I install a completely unsigned driver on 64-bit Windows 11?
Not reliably through a normal installation option. Kernel-mode code must have a valid signature. Test Mode accepts test-signed code, but it does not generally make a completely unsigned kernel driver usable.
Does Disable Driver Signature Enforcement stay enabled after restarting?
No. It applies only to the current Windows session. Signature enforcement returns during the next normal boot.
Why does Test Mode still reject my driver?
The driver may be genuinely unsigned rather than test-signed, or Memory integrity, Secure Boot, the vulnerable-driver blocklist, or driver incompatibility may be blocking it.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteWhat is the easiest way to install an INF driver?
Use an elevated Command Prompt and run pnputil /add-driver "C:PathTodriver.inf" /install. You can also use Device Manager’s Update driver > Browse my computer for drivers path.
Should I disable Memory integrity permanently?
No. Disable it only temporarily if testing requires it, then turn it back on and restart. For everyday use, replace the incompatible driver with a newer compatible version.
Why did PnPUtil add the driver but not replace the current one?
Windows may consider the existing driver a better-ranked match. PnPUtil’s /install option attempts installation but does not force a lower-ranked package onto the device.
The Bottom Line
For a single test, boot through Settings > System > Recovery > Advanced startup > Startup Settings and press 7/F7. For repeated development work, use a properly test-signed driver with Windows Test Mode. Install INF packages with Device Manager or PnPUtil, and remember that signing, HVCI, Secure Boot, compatibility, and the vulnerable-driver blocklist are separate checks. On a production PC, use a release-signed driver from the manufacturer instead of disabling Windows security permanently.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
