How to fix the issue: Windows cannot verify the publisher of this driver？
Problem Analysis：
“Windows cannot verify the publisher of this driver” is an error caused by failed driver signature verification. Windows enforces mandatory digital signature requirements for kernel-mode drivers, which is especially strict on 64-bit systems. This prompt appears when a driver lacks a Microsoft-authenticated signature, has an expired signature, or uses an untrusted certificate.
Common triggering scenarios:
- Installing legacy device drivers (no longer updated by the manufacturer)
- Installing third-party modified or cracked drivers
- The driver’s certificate chain is incomplete or expired
Solutions：
Option 1: Temporarily bypass signature verification using Test Mode (most commonly used) Run CMD as administrator and execute:
bcdedit /set testsigning on
After restarting, a “Test Mode” watermark will appear in the lower-right corner of the desktop, allowing you to install unsigned drivers.
Turn off Test Mode (restore after troubleshooting):
bcdedit /set testsigning off
Advantages: Simple and straightforward; takes effect after a reboot
Disadvantages: A watermark appears on the desktop, system security is reduced, and some anti-cheat software may report errors
Option 2: Disable mandatory driver signature enforcement (one-time boot)
Settings → System → Recovery → Advanced startup → Restart now
Select Troubleshoot → Advanced options → Startup Settings → Restart
After rebooting, press number key 7 (Disable driver signature enforcement)
Advantages: Does not affect normal system state
Disadvantages: This operation must be repeated every time you install a driver
Option 3: Disable signature check via Group Policy (Windows 10/11 Pro only)
Press Win+R, type `gpedit.msc`
Navigate sequentially: User Configuration → Administrative Templates → System → Driver Installation
Double-click **Code signing for device drivers**, set it to **Enabled**, and select **Ignore** from the options.
Reboot to apply changes.
Advantages: One-time configuration for long-term use; no watermark
Disadvantages: Only available for Pro editions; Home editions need to add Group Policy features manually
Option 4: Update the driver version (recommended first)
Go to the device manufacturer’s official website to download the latest driver (new versions are usually re-signed).
Or open Device Manager → Right-click the device → Update driver → Search automatically for drivers
Advantages: The safest method; resolves the issue fundamentally
Disadvantages: New drivers may not exist for older hardware
Option 5: Manually install and trust the certificate (advanced)
Right-click the driver’s `.inf` file, open Properties, and check signature details.
Import the accompanying `.cer` certificate to **Trusted Root Certification Authorities**:
– Double-click the certificate → Install Certificate → Local Machine → Select **Trusted Root Certification Authorities**
Advantages: Does not reduce overall system security
Disadvantages: The procedure is relatively complex; only works when the certificate is valid but has an incomplete chain.