Fix: Windows Cannot Verify the Digital Signature for This File

“Windows Cannot Verify the Digital Signature for This File” is a black screen error followed by an error code 0xc0000428. While this error can prevent your computer from booting up, it can also appear in a popup window when installing an application or device driver.

A digital signature is an electronically attached signature in an application that helps Windows verify the integrity and authenticity of the publisher. It helps protect your computer from any susceptible threats. But when Windows can not find a digital signature integrated into an application, you might face this problem.

While you generally encounter this when trying to install unsigned and uncertified drivers on your computer, it can also arise due to corrupted drivers. Whatever the causes are, this article will guide you through all the fixes that will help you eliminate the error.

How to Fix the “Windows Cannot Verify the Digital Signature for This File” Error?

It is always a good idea not to install the driver or software if it has no certified publisher and is unsigned. However, if you think that the software is legit enough to cause no harm to your computer, there are a few methods you can proceed with to install them.

Here, we have compiled 6 methods you can use to troubleshoot the error. Here, you will also learn how to solve the (error code 52) on the device manager since it also deals with digital signature verification.

Disable Signature Check

Windows has a special security feature called Driver Signature Enforcement that only lets the digitally signed drivers and programs load on your computer. When this feature is on, you can not use any unsigned drivers or install them. Therefore, disabling the feature can be helpful in installing unsigned drivers and applications.

1. Click the Windows logo on the taskbar.
2. Press and keep pressing the Shift button on your keyboard.
3. Then click Power icon > Restart.
   
4. After a while, the system will boot into recovery mode.
5. Choose Troubleshoot from Choose an option screen and then click Advanced options.
   
6. Click Startup Settings and then click Restart button.
   
7. Follow instructions on the screen and select Disable driver signature enforcement option.
   
8. Your computer will reboot, and now you can install the unsigned drivers without any problem.
9. The computer will go into normal boot mode after a restart.

Reboot System Without Integrity Check

The next security feature on Windows is integrity checking. It looks after if the file system has been altered and helps verify the authenticity of the publisher. When enabled, it can prevent loading the unsigned drivers. So, you may disable integrity checking before installing those unsigned programs.

1. Hit Windows + R.
2. Type cmd and press Ctrl + Shift + Enter keys to run the elevated Command Prompt. You can also run Command Prompt through recovery mode if you are stuck in the error screen.
3. Type or copy and paste this command bcdedit /set nointegritychecks ON on the command window and hit Enter.
   
4. Then restart the computer.
5. Proceed with the installation of the unsigned driver.
6. Once the installation is complete, run this command bcdedit /set nointegritychecks OFF to re-enable integrity checking.
   

Install in Test Mode

Windows also incorporates a separate mode where you can test uncertified software and drivers. You can boot your computer in this mode, install the unsigned applications, and then go back into normal mode easily. This way, you won’t encounter an error.

1. Open the elevated Command Prompt.
2. In the command window, paste this command bcdedit /set testsigning on and hit Enter.
   
3. Exit from the command window and restart your computer.
4. Once the system boots up in Test mode, install those uncertified software.
5. Then get out of the test mode. Type bcdedit /set testsigning off in the command window and hit Enter.
   
6. Restart your computer, and you will go back to normal mode.

Run SFC and DISM Scan

As stated in the error message screen, the error can also arise when the file is damaged, possibly corrupted. That’s why you also need to perform a DISM and SFC Scan to fix errors in the file system. This fix is primarily aimed to solve the (error code 52) on the device manager.

1. Open Command Prompt with administrator rights.
2. Type DISM /Online /Cleanup-Image /RestoreHealth and press Enter.
   
3. Once the DISM scan completes, type SFC /scannow
   
4. Hit the Enter key on your keyboard.
5. Let the scan run and repair the corrupted files.
6. Restart your computer.

Update or Uninstall Recent Applications or Drivers

You can also opt to uninstall applications or drivers that created a problem after a recent installation. You need to seek signed drivers and software so that you won’t face a could not verify digital signature error.

1. Hit Windows +R.
2. Type appwiz.cpl and press Enter key.
   
3. From the list of applications, locate and uninstall the recently installed application.
   

Moreover, you can also see if there are any problematic drivers responsible for the error and uninstall them.

1. Hit Windows + R keys.
2. Type devmgmt.msc and hit Enter key.
3. See if you find any device with a warning sign (generally a yellow exclamation).
4. Right-click over the device and choose Update driver.
   
5. Proceed with Search automatically for drivers.
   
6. If updating the driver does not solve the problem, you can go with Uninstall device option.
   
7. Confirm uninstallation in the popup and restart the computer.

Use System Restore in Windows

Lastly, you can use the restore point created on your computer to restore it to the earlier versions, where everything was working fine. Follow these steps:

1. Hit Windows + R.
2. Type rstrui, then press Enter key.
   
3. Click Next and choose the restore point.
4. Again click Next and follow the on-screen instructions to complete the system restore.