Disable driver signature enforcement on AWS (Amazon) server | Windows 2012

amazon ec2amazon-web-servicesdriverswindows-server-2012

I need to disable driver signature enforcement on a Windows 2012 that is running on Amazon AWS.
So there is no way for me to get to the server on the restart screen to choose that feature on the server starting phase.

Best Answer

Run in elevated cmd and then reboot:

bcdedit -set loadoptions DDISABLE_INTEGRITY_CHECKS 
bcdedit -set TESTSIGNING ON

Note that extra D in DDISABLE_INTEGRITY_CHECKS is not a typo.

More information:

I've tried that but it still won't work, the server is restarting in "Test Mode"

Looks like support for DDISABLE_INTEGRITY_CHECKS was removed.

when I try to install the driver (Ghostscript PDF) the wizard tell me its unsigned when I press next ofter giving the printer a name it won't go to the next step...

There is alternate ways to get unsigned driver installed. Given that you already have your Windows in Test Mode you can sign Ghostscript driver yourself or just grab already signed binaries from here

More information:

If everything fails, you can also try ReadyDriver Plus (tutorial) , but it will be hard to debug if it fails, because you don't have access to boot menu.

ReadyDriver Plus install itself as boot.bin file, and then modifies Windows Vista Boot Configuration Data (BCD), which is then read by Windows Boot Manager (the bootloader for Vista) to load ReadyDriver. When Windows Vista boot loader reads BCD, it loads ReadyDriver which will then makes the appropriate selection to disable Signed Driver Signature Enforcement, based on what user choose to install. So in a way, ReadyDriver Plus manages to permanently disable driver signing enforcement in Windows Vista, both x32 and x64, by automatically select “Disable Driver Signature Enforcement” option in the “Advanced Boot Options” menu on system startup.

Related Topic