Windows 7: What is the difference between turning testsigning on and disabling integrity check

Question

To disable KMCS in Windows 7 64 bit, What is the difference between

bcdedit.exe -set loadoptions DDISABLE_INTEGRITY_CHECKS
bcdedit.exe -set TESTSIGNING ON

Are both necessary or either one to load unsigned drivers?

Thanks for your help - Daniel

score 4 · Answer 1 · answered Apr 27 '12 at 22:07

4

I believe support for DDISABLE_INTEGRITY_CHECKS to be completely removed (there are various windows updates that remove it). The only way to load unsigned drivers on Win7 64bit is if you enable test signing and leave it enabled for as long as you need the drivers.

answered Apr 27 '12 at 22:07

Marcel Gheorghita

1,853
13
19

Thanks Marcel, I think you are right. DDISABLE_INTEGRITY_CHECKS was muted after Vista SP1. – Daniel Yaacov May 04 '12 at 21:37
@Daniel Bilar, do you have any official microsoft link that proves it? – Tsagana Nokhaeva May 03 '18 at 12:01
1

This Microsoft documentation confirms it for Winows7 and Windows 8: https://learn.microsoft.com/en-us/windows-hardware/drivers/devtest/bcdedit--set – George Robinson Jan 27 '20 at 21:42

score 3 · Accepted Answer · answered May 03 '18 at 13:16

According to the offical documentation, nointegritychecks command is ignored by Windows 7 and Windows 8:

nointegritychecks [ on | off ]

Disables integrity checks. Cannot be set when secure boot is enabled. This value is ignored by Windows 7 and Windows 8.

Since /set nointegritychecks on is an alias to -set loadoptions DDISABLE_INTEGRITY_CHECKS, I make an assumption that this command is obsoleted and no longer works.

So the answer to your question would be that only bcdedit.exe -set TESTSIGNING ON makes any sense in Windows 7 64 bit. It switches Windows to the "Test Mode" and adds a watermark at the bottom right corner of the desktop.

score 1 · Answer 3 · answered Apr 05 '13 at 12:07

You disable common mode Windows 7 starts.
You give an alternative to common mode.
- You need both lines. Many times you cannot obtain authentic identity after you are part of Windows system/your IP provider. so start in safe mode and write commands. Keep in mind before any try: unistall Java from system. If anyway it does not work, activate guest account and try install your device there. It will show in your common account next time you log in. Good luck!

score 0 · Answer 4 · answered Jul 07 '15 at 20:08

0

NO they still work. I always run them both. after reboot will see your OS version and test mode in bottom rt corner. can also use compatibility mode to try to force or use unsigned drivers and try under an older OS (typically works best with xp sp 3 compat mode. I have been running them in all OS, Win 7, Win 8.1, Win 10 and Win Server 2012r2. You can take a look at your bcd entries and they will be listed there also.

answered Jul 07 '15 at 20:08

eric

1

1

Isn't TESTSIGNING command enough? Does DDISABLE_INTEGRITY_CHECKS command change anything? Yes, bcd entries are updated, but it seems to me that they are silentlly ignored by Windows. – Tsagana Nokhaeva May 03 '18 at 12:08

Windows 7: What is the difference between turning testsigning on and disabling integrity check

4 Answers4