What is Driver Signing in Windows Operating Systems

Driver signing is the process of adding a digital signature with a device driver package. Windows uses digital signatures to verify the integrity of the driver files (making sure that the diver files are not changed after signing) and to verify the device manufacturer (driver publisher).

Windows Server Operating requires all device driver files be signed by Microsoft with a digital signature before being allowed to install and load into the Windows Server kernel. This enhances the security of the Windows Server by allowing Windows Server to prevent any malware being loaded along with Windows Server kernel. A device driver’s digital signature shows that Microsoft Corporation has tested, verified and digitally signed device driver file. A signed device driver proves that the installation of the driver will not cause security, stability or reliability issues to the Windows Server Operating System.

Driver Store is the trusted store of the driver packages. The location of the DriverStore folder is in %systemroot%/System32/DriverStore.

In Windows Server 2025, the Digest algorithm used for digital signing is SHA256 (Secure Hash Algorithm 256) and the Digest encryption algorithm used for digital signing is RSA (Rivest Shamir Adleman).