// Module included in the following assemblies:
//
// * virt/managing_vms/virt-update-virtio-drivers.adoc

:_mod-docs-content-type: PROCEDURE
[id="virt-updating-red-hat-virtio-drivers-windows_{context}"]
= Enable automatic updates for Red{nbsp}Hat virtio-win drivers

[role="_abstract"]
If the Windows Update service (WUS) is restricted to allow only drivers explicitly signed and published by Microsoft, you must manually configure automatic Red{nbsp}Hat `virtio-win` driver updates. Otherwise, automatic updates are disabled.

.Prerequisites

* The cluster must have internet connectivity. Disconnected clusters cannot reach the WUS.

.Procedure

. Import the Red Hat Release Certificate into the Trusted Publishers store.
+
Example command:
+
[source,powershell]
----
Import-Certificate -FilePath "redhat-driver-cert.cer" -CertStoreLocation Cert:\LocalMachine\TrustedPublisher
----

. In the Group Policy Management Console (GPMC):

.. Set the `Allow signed updates from an intranet Microsoft update service location` policy to `Enabled`.
+
If a driver is signed by a certificate in the Trusted Publishers store, it is now accepted, even if it didn't come from Microsoft directly.

.. Set the `Do not include drivers with Windows Updates` policy to `Disabled`.
