Learn more about this Integrity protection requirement and why it might not be enabled on your device.
What is Windows-certified drivers?
Windows-certified drivers, also known as WHQL-only, is a Windows security protection that helps prevent untrusted kernel drivers from loading. Drivers operate with a high level of privilege in Windows. Windows-certified drivers help strengthen the integrity of Windows by restricting which drivers are allowed to run in the kernel.
Why does Integrity protection check for this?
Integrity protection checks whether important security protections are active on your device. Windows-certified drivers are one of these protections because restricting which drivers can run with kernel-level privileges helps protect Windows from untrusted or potentially vulnerable drivers. If Windows-certified drivers isn't active, the Integrity protection page in Settings may show that your device Needs attention.
Why isn't Windows-certified drivers enabled on my device?
Windows may not enable Windows-certified drivers if a driver currently used by your device isn't compatible with this protection. This may be associated with:
- Hardware or peripherals connected to your device
- Software that installs a driver
- Older hardware or software that depends on a legacy driver
This doesn't necessarily mean that the driver is malicious or unsafe. It means that Windows can't currently enable this additional protection without potentially affecting something that depends on that driver.
Why can't I just turn it on?
Enabling Windows-certified drivers changes which drivers Windows permits to load. If your device depends on an incompatible driver, enabling the protection could prevent the associated hardware or software from working as expected. For this reason, Integrity protection doesn't provide a simple switch to enable Windows-certified drivers when Windows hasn't determined that the device is ready for the protection.
What should I do?
Start by keeping Windows and your drivers up to date. An updated version of a driver may meet the requirements for this protection. Check Windows Update for available updates and check with the manufacturer of your device, hardware, or software for newer drivers.
If your device is managed by your organization, contact your IT administrator before removing or changing drivers. Windows may be able to enable this protection in the future after the compatibility issue affecting your device is resolved.
Can I continue using my device?
Yes. You can continue using your device normally. Integrity protection will indicate that your device doesn't currently meet this security criterion. The status helps you understand which protections are active and where your device may benefit from additional protection.
You shouldn't remove hardware, software, or drivers simply to change your Integrity protection status without first understanding what depends on them.
For IT administrators
If devices in your organization don't meet the Windows-certified drivers requirement, investigate whether applications, hardware, or peripherals in your environment rely on drivers that aren't compatible with the protection. Where possible, obtain an updated compatible driver from the hardware or software provider before removing or replacing an existing driver.