Due to the transient nature of the MTK handshake (the port appears for only 2-3 seconds during boot), "Force Signing" or "Driver Signature Enforcement Override" is often required.