MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

6-34 Chapter 6 Installing, Managing, and Troubleshooting Hardware Devices and Drivers
F06us11
To configure how the system responds to unsigned files, click System in the Performance
And Maintenance window in Control Panel. In the System Properties dialog
box, on the Hardware tab, click Driver Signing to open the Driver Signing Options dialog
box (see Figure 6-11).
Figure 6-11 Configure driver signing in the Driver Signing Options dialog box.
You can configure the following three driver signing settings:
■ Ignore This option allows any files to be installed regardless of their digital signature
or the lack thereof.
■ Warn This option, the default, displays a warning message before allowing the
installation of an unsigned file.
■ Block This option prevents the installation of unsigned files.
Real World Driver Signing
Because of the time that it takes for Microsoft to test device drivers before signing
them, the most recent drivers available from a manufacturer are rarely signed. If
you are managing a small number of computers, you are usually better off not
worrying too much about driver signing and just using the most recent driver
available from the manufacturer of a device because newer drivers are likely to
have bug fixes and improvements that are worth having. Just make sure that you
acquire the drivers directly from the vendor.
If you are managing a large installation of computers, though, the small risk associated
with using unsigned drivers becomes significant enough that it is probably
better to wait for the signed drivers to come out.