Fix Publisher Could Not Be Verified Error in Windows 11

This error appears when Windows 11 blocks an app or driver because its digital signature is missing, invalid, or issued by a publisher Windows doesn’t trust. The fix usually involves changing SmartScreen settings, updating the app, or forcing the installation through advanced startup. Below are the steps to resolve it safely.

What You’ll Need

Administrator account on the Windows 11 PC
Internet connection (to download updates or verify publisher)
The installer file or app that triggers the error

Step-by-Step

Identify the source of the error. Right-click the file or shortcut that shows the error and select Properties. Go to the Digital Signatures tab. If it says “This digital signature is not valid,” the file is unsigned or corrupted. If it’s a driver, note the device name.
Update the app or driver. Visit the official website of the software or hardware manufacturer and download the latest version. Outdated or beta versions often have expired certificates. Reinstall the new version and check if the error persists.
Unblock the file (if downloaded). Right-click the installer, select Properties, and check the Unblock box at the bottom of the General tab. Click Apply and OK. This clears the “file from the internet” flag that can trigger the warning.
Temporarily disable SmartScreen for this installation. Go to Start > Settings > Privacy & security > Windows Security > App & browser control. Under Reputation-based protection, click SmartScreen for Microsoft Store apps and turn it off. Try installing again. Turn it back on immediately after.
Use the “More info” link on the error dialog. When Windows shows the “Publisher could not be verified” warning, click the More info link. A Run anyway button appears. This bypasses the warning for that single run without changing system settings.
Force install through Advanced Startup (for drivers). If the error is for a driver and you trust the source, restart your PC. While it boots, hold Shift and click Restart. Go to Troubleshoot > Advanced options > Startup Settings, then click Restart. Press 7 or F7 to disable driver signature enforcement. Boot into Windows and install the driver. Restart normally afterward.
Check the system date and time. An incorrect date or time can make valid certificates appear expired. Go to Settings > Time & language > Date & time and turn on Set time automatically. If it’s already on, toggle it off, wait a few seconds, and turn it back on.
Run the installer as administrator. Right-click the file and select Run as administrator. Some installers need elevated privileges to properly register their signature.
If all else fails, contact the publisher. The software may have a known issue. Check the official support page or forum for a patch or a workaround specific to Windows 11.

Common Mistakes

Disabling SmartScreen permanently. This leaves your PC more vulnerable. Turn it back on right after the installation.
Ignoring the date/time fix. Many users skip this simple step, but a wrong clock is a frequent cause of certificate errors.
Using “Run anyway” for unknown publishers. Only do this if you are 100% sure the file is safe and from a legitimate source. Malware often triggers this exact error.
Forgetting to unblock the file. Windows marks files downloaded from the internet with a hidden flag. Unblocking it is quick and often resolves the issue.
Not updating the app. An old version with an expired certificate will keep failing until you update it.

Tips

Always download software from the official website, not third-party mirrors. This reduces the chance of getting a tampered file.
If you manage multiple PCs, use a USB drive to transfer the installer after unblocking it once. The unblock flag is stored on the file itself, so it will carry over.
For enterprise environments, use Group Policy to add trusted publishers instead of disabling SmartScreen for everyone.
Keep Windows 11 updated. Microsoft regularly updates the certificate trust list, which can resolve false positives.

Troubleshooting

Error still appears after unblocking. The file may be corrupted. Re-download it, or ask the sender to re-export it. Check the file size against the official listing.
“Run anyway” is grayed out. This happens when the file is blocked by policy or the signature is severely invalid. Try the SmartScreen disable method, or use the command line with start /wait after temporarily disabling the policy.
Driver still won’t install after disabling signature enforcement. The driver may be incompatible with Windows 11. Look for a newer version or check the manufacturer’s compatibility list. Do not force an incompatible driver.
SmartScreen turns back on automatically. Windows 11 may re-enable it after a reboot. That’s normal; just re-disable it for the installation, then turn it on again.
Error appears for a system file. Run sfc /scannow in an elevated Command Prompt, then DISM /Online /Cleanup-Image /RestoreHealth. Corrupted system files can trigger false publisher errors.

Frequently Asked Questions

What does “Publisher could not be verified” mean?

Windows cannot confirm that the file’s digital signature is valid and issued by a trusted source. It doesn’t always mean the file is dangerous, but it means Windows can’t vouch for it.

Is it safe to click “Run anyway”?

Only if you downloaded the file from the official source and are sure of its legitimacy. If you have any doubt, cancel and verify the file with an antivirus scan or by checking the publisher’s website.

Why does this happen with legitimate software?

Common reasons include expired certificates, the developer not signing the file, or the file being modified after signing. Small developers sometimes skip signing to save costs.

Will disabling SmartScreen harm my PC?

Temporarily disabling it for one installation is low-risk, but leaving it off makes your PC more vulnerable to malicious downloads. Always re-enable it after the installation.

How do I know if a file is signed?

Right-click the file, go to Properties, and open the Digital Signatures tab. If the tab is missing, the file is unsigned.

Can I add a publisher to the trusted list permanently?

Yes. In the error dialog, click More info, then click the link to show publisher details, and choose to trust the publisher. This adds them to your trusted certificates, but only do this for publishers you trust completely.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →