Code signing for driver packages: registry value BehaviorOnFailedVerifyUserHKCU\Software\Policies\Microsoft\Windows NT\Driver Signing
- Policy ID
- DriverSigning
- Scope
- User Configuration
- Supported on
- Windows Server 2003, Windows XP, and Windows 2000 only
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- System › Driver Installation
Registry
BehaviorOnFailedVerify
REG_DWORDUser- Enabled value
- Depends on the option value
- Element
- When Windows detects a driver file without a digital signature:
| Item | Stored value |
|---|---|
| Ignore | 0 |
| Warn | 1 |
| Block | 2 |
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows NT\Driver Signing] ; Options (use only one) ; Ignore "BehaviorOnFailedVerify"=dword:00000000 ; Warn "BehaviorOnFailedVerify"=dword:00000001 ; Block "BehaviorOnFailedVerify"=dword:00000002
CMD
:: Options (use only one) :: Ignore reg add "HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing" /v "BehaviorOnFailedVerify" /t REG_DWORD /d 0 /f :: Warn reg add "HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing" /v "BehaviorOnFailedVerify" /t REG_DWORD /d 1 /f :: Block reg add "HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing" /v "BehaviorOnFailedVerify" /t REG_DWORD /d 2 /f
PowerShell
# Common: create the key New-Item -Path 'HKCU:\Software\Policies\Microsoft\Windows NT\Driver Signing' -Force | Out-Null # Options (use only one) # Ignore New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Windows NT\Driver Signing' -Name 'BehaviorOnFailedVerify' -PropertyType DWord -Value 0 -Force | Out-Null # Warn New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Windows NT\Driver Signing' -Name 'BehaviorOnFailedVerify' -PropertyType DWord -Value 1 -Force | Out-Null # Block New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Windows NT\Driver Signing' -Name 'BehaviorOnFailedVerify' -PropertyType DWord -Value 2 -Force | Out-Null