enable driver signature enforcement

Question

Hi to all

We have a server with Windows Server 2012 R2 OS.

An external technician wanted to install a driver.
The system did not accept it displaying the message (The hash for the file is not present in the specific catalog file)
To pass the message run these 2 commands
bcdedit -set loadoptions DISABLE_INTEGRITY_CHECKS
bcdedit -set TESTSIGNING ON

And make a restart
The Server after the reboot shows bottom right Test Mode and the version of the OS

How can I reset the settings and stop displaying the message in the lower right corner?

Thanks and regards.

Answer 1

Hello

Thank you for your question and reaching out.

Method 1:
(enable driver signature enforcement - DEFAULT)
bcdedit /set nointegritychecks off

OR

(Disable driver signature enforcement)
bcdedit /set nointegritychecks on

(enable Test Mode)
bcdedit /set testsigning on

How to Enable or Disable Driver Signature Enforcement

OR

(Disable Test Mode - DEFAULT)
bcdedit /set testsigning off

Method 2:

Select the “Start” button.
Type “startup”.
Select “Change advanced startup settings“.
Select “Restart now” under the “Advanced startup” area.
Select “Troubleshoot“.
Select “Advanced Options“.
Select “Startup Options“.
Select “Restart“.
A menu will appear where you can press “7” on your keyboard to choose “Disable driver signing enforcement“.

---

--If the reply is helpful, please Upvote and Accept as answer--