5

I want to boot windows 7 every time with "disable driver signature enforcement". Because every time I didn't do so, my WLAN adapter "Qualcomm Atheros QCA9377" didn't work.

I tried bcdedit.exe hacks but it didn't work, the only way to get my wifi working is to press F8 and choose "disable driver signature enforcement"

So, is there any hack or workaround to make it the default without pressing F8?

user2132188
  • 685

1 Answers1

8

There are a couple of ways to do that:

  1. Import certificates prior to install

Follow these steps:

  1. install the software once manually by confirming that the unsigned drivers shall be used
  2. go to %windir%\inf and search for the latest OEM??.INF file; open it (notepad) and verify by its contents that this is the driver you wish to install automatically next time
  3. go to %windir%\system32\catroot{any ID}\OEM??.CAT (<- same number as in step 2); right click on this file, select properties, go to "Digital Signatures" tab, mark the certificate, click on details
  4. on the next window click "Show Certificate"
  5. on the next window open the "Details" tab and click "Save to File..."
  6. collect this/all certificates
  7. deploy these certificates 7.1 either in a batch /cmd script using "certutil.exe -f -addstore "TrustedPublisher" "MYFILE.cer" prior to setup 7.2 or by Group Policies (computer \ Policies \ Windows \ Security \ Public Key Policies \ add your files here )
  8. run your setup just the way you wanted

  1. Using Driver Signature Enforcement Overrider

    • Download the application from the Softpedia link.

    • Right click on it and choose "Run as administrator". Inside its main menu, press on the “Enable Test Mode” button and follow the instructions on the screen. This will enable TESTSIGNING mode, which allows unverified system files to be loaded.

    • Now all you have to do is to add the unverified signature to the required system files. To do so press on the “Sign a System File” button from the main menu, and enter specific filename including full path. For example: if ATITool64.sys from C:\Windows\System32\drivers refuses to load due to driver signature enforcement, you should type: C:\Windows\System32\drivers\ATITool64.sys, and if you would like to sign more than a single file, just repeat this procedure until you’re done, and finally reboot.

    • After you enabled Test Mode and added signatures to the required system files, they should bypass Windows’s driver signature enforcement and load without any issues. However, if for some reason you are interested to revert it, you can re-launch the application, choose “Disable Test Mode” from the main menu, and reboot.

Note: DSEO requires administrative privileges (Run as administrator).

Acknowledgements

  1. Permanently disable driver signature enforcement on Win 7 x64
xavier_fakerat
  • 2,584