Policy
Code signing for driver packages
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows2000, WindowsServer2003, WindowsXP
Determines how the system responds when a user tries to install driver package files that are not digitally signed. This setting establishes the least secure response permitted on the systems of users in the group. Users can use System in Control Panel to select a more secure setting, but when this setting is enabled, the system does not implement any setting less secure than the one the setting established. When you enable this setting, use the drop-down box to specify the desired response. -- "Ignore" directs the system to proceed with the installation even if it includes unsigned files. -- "Warn" notifies the user that files are not digitally signed and lets the user decide whether to stop or to proceed with the installation and whether to permit unsigned files to be installed. "Warn" is the default. -- "Block" directs the system to refuse to install unsigned files. As a result, the installation stops, and none of the files in the driver package are installed. To change driver file security without specifying a setting, use System in Control Panel. Right-click My Computer, click Properties, click the Hardware tab, and then click the Driver Signing button.
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Element | Type | Registry mapping | Constraints & behavior |
|---|---|---|---|
When Windows detects a driver file without a digital signature: ID DriverSigningOp | enum | HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing\BehaviorOnFailedVerify Type REG_DWORD | Options: Ignore (0), Warn (1), Block (2) |
Other policies in this category
Explore related policies at the same level.
- ComputerAllow non-administrators to install drivers for these device setup classesAt least Windows Vista
- UserConfigure driver search locationsWindows Server 2008, Windows Server 2003, Windows Vista, and Windows XP
- ComputerTurn off Windows Update device driver search promptWindows Server 2008, Windows Server 2003, Windows Vista, and Windows XP SP2
- UserTurn off Windows Update device driver search promptWindows Server 2008, Windows Server 2003, Windows Vista, and Windows XP SP2