Why Do Windows Users Getting Digital Signed Driver Error When Attempting to Install GlobalProtect?

Why Do Windows Users Getting Digital Signed Driver Error When Attempting to Install GlobalProtect?

13759
Created On 04/02/20 20:25 PM - Last Modified 09/02/20 23:45 PM


Question
Why do some Windows users getting the following digital signed driver error when attempting to Install GlobalProtect?

User-added image


Environment
  • Windows 10
  • GlobalProtect Agent 5.0, 5.1


Answer
Windows 10 has the Program Compatibility Assistant feature to detect and validate digitally signed drivers.
Since GlobalProtect contains a driver that is not digitally signed, the installation will get interrupted and become unsuccessful.

In Windows OS, there is an option to disable driver signing with Group Policy Editor when an unsigned driver, such as GlobalProtect, needs to install.

The steps are as follows:
 
  1. Open Group Policy Editor (Run > type in "gpedit.msc").
  2. Navigate to User configuration > Administrative Templates > System > Driver Installation. Then, open Code signing for device drivers.
User-added image
  1. Click on Enabled. Then, select either Warn or Ignore under Options.
User-added image
Note: this will allow the GlobalProtect installation to complete.
 
  1. Once GP Installation is complete, you can re-enable the Block feature for detecting drivers without a digital signature in the Program Compatibility Assistant..


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kCSArticleDetail?id=kA10g000000PPQq&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkCSArticleDetail

Attachments
Choose Language