# Module sign key ignore
**URL:** https://forums.developer.nvidia.com/t/module-sign-key-ignore/301708
**Category:** Jetson AGX Orin
**Tags:** security
**Created:** [July 30, 2024, 2:49pm UTC](https://forums.developer.nvidia.com/t/module-sign-key-ignore/301708 "2024-07-30T14:49:46Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@rlatae123](https://forums.developer.nvidia.com/u/rlatae123)
#### Post date: [July 30, 2024, 2:49pm UTC](https://forums.developer.nvidia.com/t/module-sign-key-ignore/301708/1 "2024-07-30T14:49:46Z")
Hi
We are developing a camera driver.
After developing the camera driver, we want to apply only the driver to the official image.
But the sign key does not match, so a module error “module verification failed signature and/or required key missing” occurs.
Can we register the driver by ignoring the sign key?
---
### Author:  [@enrique.ramirez](https://forums.developer.nvidia.com/u/enrique.ramirez)
#### Post date: [July 30, 2024, 5:09pm UTC](https://forums.developer.nvidia.com/t/module-sign-key-ignore/301708/3 "2024-07-30T17:09:30Z")
Hi @rlatae123
What steps are you following to build and install the driver?
Enrique Ramirez
Embedded SW Engineer at RidgeRun
Contact us: [support@ridgerun.com](mailto:support@ridgerun.com)
Developers wiki: [https://developer.ridgerun.com](https://developer.ridgerun.com/)
Website: [www.ridgerun.com](http://www.ridgerun.com/)
---
### Author:  [@rlatae123](https://forums.developer.nvidia.com/u/rlatae123)
#### Post date: [July 30, 2024, 9:29pm UTC](https://forums.developer.nvidia.com/t/module-sign-key-ignore/301708/4 "2024-07-30T21:29:14Z")
We are building and installing through the nvbuild script.
---
### Author:  [@JerryChang](https://forums.developer.nvidia.com/u/JerryChang)
#### Post date: [July 31, 2024, 3:17am UTC](https://forums.developer.nvidia.com/t/module-sign-key-ignore/301708/6 "2024-07-31T03:17:09Z")
hello rlatae123,
did you meant the warning message has reported as below?
` module verification failed: signature and/or required key missing - tainting kernel`
By default, kernel has the ability to load unsigned modules, but it taints the kernel as a security precaution. this tainting serves as a warning that the kernel may be running with unverified or unsafe code.
FYI,
we have the `CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"` as the default setting.
the signing key is automatically generated in each kernel build, which means the signing key is different from each kernel building, thus, the kernel module compiled by user has different sig\_key with the release one.
here’re couple of approaches to resovle this.
(1) you may configure `CONFIG_MODULE_SIG` as disabled to get rid of the message during modprobe/insmod.
or…
(2) you may try to specify your own sig\_key using `CONFIG_MODULE_SIG_KEY` in kernel config, to rebuild the kernel and kernel modules, install the kernel image, dtbs and kernel modules to target.
after that, please use your own sig\_key to sign the tegra-camera.ko built later.
please see-also developer guide for reference, [Kernel Module Signing](https://docs.nvidia.com/jetson/archives/r36.3/DeveloperGuide/SD/Security/SecureBoot.html#kernel-module-signing).
---
### Author:  [@rlatae123](https://forums.developer.nvidia.com/u/rlatae123)
#### Post date: [July 31, 2024, 3:21am UTC](https://forums.developer.nvidia.com/t/module-sign-key-ignore/301708/7 "2024-07-31T03:21:51Z")
Hi Jerry
When flashing with sdkmanager, each module has a signing key applied.
Is that right?
However, when building the kernel, a new key is generated and applied to the module.
I want to apply a specific module I built to an environment that was run with SDKMANAGER.
Is there such a way?
Or is it possible to apply the module key applied to the official image to a custom module?
---
### Author:  [@JerryChang](https://forums.developer.nvidia.com/u/JerryChang)
#### Post date: [July 31, 2024, 3:27am UTC](https://forums.developer.nvidia.com/t/module-sign-key-ignore/301708/8 "2024-07-31T03:27:25Z")
hello rlatae123,
as mentioned, there’s no chance for using the same sig\_key to sign kernel modules.
please try those two approaches to resolve such warning message.
---
### Author:  [@rlatae123](https://forums.developer.nvidia.com/u/rlatae123)
#### Post date: [July 31, 2024, 4:20am UTC](https://forums.developer.nvidia.com/t/module-sign-key-ignore/301708/9 "2024-07-31T04:20:54Z")
Hi, Jerry
I’ll try the suggested method
I have two more question
If a key error like the above occurs
Is the applied module a module that is not working properly?
and Is it possible to replace modules in official images without building the kernel?
---
### Author:  [@JerryChang](https://forums.developer.nvidia.com/u/JerryChang)
#### Post date: [July 31, 2024, 5:30am UTC](https://forums.developer.nvidia.com/t/module-sign-key-ignore/301708/10 "2024-07-31T05:30:28Z")
hello rlatae123,
it’s warning instead of failure, please check my previous [comment #6](https://forums.developer.nvidia.com/t/module-sign-key-ignore/301708/6) for explanation.
---
### Author:  [@system](https://forums.developer.nvidia.com/u/system)
#### Post date: [August 27, 2024, 7:57am UTC](https://forums.developer.nvidia.com/t/module-sign-key-ignore/301708/12 "2024-08-27T07:57:45Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.