3

I want to boot windows 7 every time with "disable driver signature enforcement". Because every time I didn't do so, my WLAN adapter "Qualcomm Atheros QCA9377" didn't work.

I tried bcdedit.exe hacks but it didn't work, the only way to get my wifi working is to press F8 and choose "disable driver signature enforcement"

So, is there any hack or workaround to make it the default without pressing F8?

7
  • What bcdedit commands did you try? – testeaxeax Jul 23 '17 at 16:53
  • bcdedit.exe -set loadoptions DDISABLE_INTEGRITY_CHECKS bcdedit.exe -set TESTSIGNING ON – user2132188 Jul 23 '17 at 16:57
  • See this article. – Biswapriyo Jul 23 '17 at 17:05
  • I know this isn't an answer to your question. But, maybe the better question to ask is why is this driver having this issue? Rather than disable an important part of the OS to protect it, you should be trying to get a properly working driver. – Appleoddity Jul 23 '17 at 20:49
  • @Appleoddity> ` But, maybe the better question to ask is why is this driver having this issue?` As is usually the case with things like this, the manufacturer stopped supporting the product and doesn't provide newer drivers that are compatible, and not everybody can throw out their old stuff and just buy all new things every few years. – Synetech Apr 11 '20 at 14:41
4

There are a couple of ways to do that:

  1. Import certificates prior to install

Follow these steps:

  1. install the software once manually by confirming that the unsigned drivers shall be used
  2. go to %windir%\inf and search for the latest OEM??.INF file; open it (notepad) and verify by its contents that this is the driver you wish to install automatically next time
  3. go to %windir%\system32\catroot{any ID}\OEM??.CAT (<- same number as in step 2); right click on this file, select properties, go to "Digital Signatures" tab, mark the certificate, click on details
  4. on the next window click "Show Certificate"
  5. on the next window open the "Details" tab and click "Save to File..."
  6. collect this/all certificates
  7. deploy these certificates 7.1 either in a batch /cmd script using "certutil.exe -f -addstore "TrustedPublisher" "MYFILE.cer" prior to setup 7.2 or by Group Policies (computer \ Policies \ Windows \ Security \ Public Key Policies \ add your files here )
  8. run your setup just the way you wanted
  1. Using Driver Signature Enforcement Overrider

    • Download the application from the Softpedia link.

    • Right click on it and choose "Run as administrator". Inside its main menu, press on the “Enable Test Mode” button and follow the instructions on the screen. This will enable TESTSIGNING mode, which allows unverified system files to be loaded.

    • Now all you have to do is to add the unverified signature to the required system files. To do so press on the “Sign a System File” button from the main menu, and enter specific filename including full path. For example: if ATITool64.sys from C:\Windows\System32\drivers refuses to load due to driver signature enforcement, you should type: C:\Windows\System32\drivers\ATITool64.sys, and if you would like to sign more than a single file, just repeat this procedure until you’re done, and finally reboot.

    • After you enabled Test Mode and added signatures to the required system files, they should bypass Windows’s driver signature enforcement and load without any issues. However, if for some reason you are interested to revert it, you can re-launch the application, choose “Disable Test Mode” from the main menu, and reboot.

Note: DSEO requires administrative privileges (Run as administrator).

Acknowledgements

  1. Permanently disable driver signature enforcement on Win 7 x64
0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.