Windows & BSOD · critical

How to fix Digital Signature Verification Failure (0xC0000428)

Windows & BSOD troubleshooting guide

What this error means

Error code 0xC0000428 indicates that Windows Boot Manager could not verify the digital signature of a recently installed driver or system file. This prevents Windows from starting up properly.

Updated

Before you begin

Save open work and back up important files. Use instructions for your exact device and software version. If Windows cannot start, see the startup guide.

Work through these checks

0 of 4 complete
01Disable Driver Signature Enforcement from the Advanced Startup Options menu
  1. Disable Driver Signature Enforcement from the Advanced Startup Options menu
What to expect

Check whether the original symptom still occurs.

If it does not help

Continue only if this check applies to your device. Consult its manufacturer if you are unsure.

Browse related errors
02Use Bootrec to repair the Boot Configuration Data (BCD)
  1. Use Bootrec to repair the Boot Configuration Data (BCD)
What to expect

Check whether the original symptom still occurs.

If it does not help

Continue only if this check applies to your device. Consult its manufacturer if you are unsure.

Browse related errors
03Roll back or uninstall the problematic driver in Safe Mode
  1. Roll back or uninstall the problematic driver in Safe Mode
What to expect

Check whether the original symptom still occurs.

If it does not help

Continue only if this check applies to your device. Consult its manufacturer if you are unsure.

Browse related errors
04Update the offending driver file
  1. Update the offending driver file
What to expect

Check whether the original symptom still occurs.

If it does not help

Continue only if this check applies to your device. Consult its manufacturer if you are unsure.

Browse related errors

Possible causes

  • Outdated driver files with expired or invalid digital signatures
  • Corrupted boot configuration data (BCD)
  • Unsigned drivers installed on 64-bit systems with driver signature enforcement enabled