[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[win-pv-devel] 答复: Windows 7 signature issues



To make Windows7 recognize SHA256 signatures, should install KB3033929(https://technet.microsoft.com/en-us/library/security/3033929 ).

 

Now I can install win-pv-8.2.

 

Thanks

-Kangjie

 

发件人: Paul Durrant [mailto:Paul.Durrant@xxxxxxxxxx]
发送时间: 2017419 17:12
收件人: 席康杰
抄送: win-pv-devel@xxxxxxxxxxxxxxxxxxxx
主题: RE: Windows 7 signature issues

 

Thanks. Indeed it is still a cert issue:

 

!    sig:                          VerifyTrustFailed for C:\Windows\system32\SETBE92.tmp.

!    sig:                          Error 0x800b0109: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.

     cpy:                          Source File 'C:\Windows\system32\SETBE92.tmp' is NOT signed NT5 Crypto.

 

And later:

 

!!!  dvi:                          Device not started: Device has problem: 0x34: CM_PROB_UNSIGNED_DRIVER.

 

So it looks like your Windows installation is still unable to understand SHA256 certs.

 

Cheers,

 

  Paul

 

From: 席康杰 [mailto:xikangjie@xxxxxx]
Sent: 19 April 2017 10:02
To: Paul Durrant <Paul.Durrant@xxxxxxxxxx>
Cc: win-pv-devel@xxxxxxxxxxxxxxxxxxxx
Subject:
答复: Windows 7 signature issues

 

I reinstalled the xenbus of winpv-8.2 again, attachment is the setupapi.dev.log.

 

Thanks

-Kangjie

 

发件人: Paul Durrant [mailto:Paul.Durrant@xxxxxxxxxx]
发送时间: 2017419 16:35
收件人: 席康杰
抄送: win-pv-devel@xxxxxxxxxxxxxxxxxxxx
主题: RE: Windows 7 signature issues

 

Could you send me your setupapi.dev.log file? (It’s in C:\Windows\inf). That will contain more information on the reason for installation failure. The univention drivers are signed with a SHA1 cert so your issue does still sound like a SHA1 vs. SHA256 issue.

 

  Paul

 

From: 席康杰 [mailto:xikangjie@xxxxxx]
Sent: 19 April 2017 08:53
To: Paul Durrant <Paul.Durrant@xxxxxxxxxx>
Cc: win-pv-devel@xxxxxxxxxxxxxxxxxxxx
Subject:
答复: Windows 7 signature issues

 

Hi,

                The KB2949927 has been replaced by KB3123479(https://support.microsoft.com/zh-cn/help/2949927/microsoft-security-advisory-availability-of-sha-2-hashing-algorithm-for-windows-7-and-windows-server-2008-r2-october-14,-2014), but after I installed KB3123479, I still failed to install windows-pv-8.2, the errors are same as last email.

 

 

                If this problem can’t be solved, I have to switch to GPLPV-drivers(http://wiki.univention.com/index.php?title=Installing-signed-GPLPV-drivers ), which works well.

 

Thanks

-Kangjie

 

发件人: Paul Durrant [mailto:Paul.Durrant@xxxxxxxxxx]
发送时间: 2017418 21:09
收件人: 席康杰
抄送: win-pv-devel@xxxxxxxxxxxxxxxxxxxx
主题: Windows 7 signature issues

 

Hi,

 

  Please don’t hijack old threads.

 

  I checked the signature on 8.2 xenbus.sys and it looks good to me. Are you perhaps running an unpatched Windows 7 that has not been updated to understand SHA-256 certs? (See https://technet.microsoft.com/en-us/library/security/2949927.aspx).

 

  Cheers,

 

    Paul

 

From: 席康杰 [mailto:xikangjie@xxxxxx]
Sent: 18 April 2017 12:12
To: Paul Durrant <Paul.Durrant@xxxxxxxxxx>
Subject:
答复: [win-pv-devel] Windows 10 Pro Activation stopped after installing 8.2 drivers

 

Hi Paul,

You said the released drivers are signed, but when I install win-pv-8.2 on windows7 x64, get warning “Windows requires a digitally signed driver”, below is the screenshot:

               

When I reboot the system , the system failed to start, “Windows can not verify the digital signature of this file”, below is the screenshot.

 

What should I do?

 

Thanks

-Kangjie

 

发件人: win-pv-devel [mailto:win-pv-devel-bounces@xxxxxxxxxxxxxxxxxxxx] 代表 Paul Durrant
发送时间: 201743 20:37
收件人: 'David TECHER'; win-pv-devel@xxxxxxxxxxxxxxxxxxxx
主题: Re: [win-pv-devel] Windows 10 Pro Activation stopped after installing 8.2 drivers

 

Hi David,

 

  I suspect it is turning on testsigning that is stopping Windows Update. You don’t need to turn testsigning on for released drivers though. They are signed so should just be able install them (clicking through the trust dialog on the way). It’s only development builds that will need testsigning enabled.

 

Cheers,

 

    Paul

 

 

From: win-pv-devel [mailto:win-pv-devel-bounces@xxxxxxxxxxxxxxxxxxxx] On Behalf Of David TECHER
Sent: 03 April 2017 13:14
To: win-pv-devel@xxxxxxxxxxxxxxxxxxxx
Subject: [win-pv-devel] Windows 10 Pro Activation stopped after installing 8.2 drivers

 

Hi ALL,

 

This weekend I set up Windows 10 Pro 64 Bits  as a VM (+ VGA Passthrough = GTX 680 harcoded to GRID K2).

 

I used Xen 4.3.4 on a Linux Kernel 3.19.

 

The VM is able to boot and works fine.

 

I installed all PV Drivers for 8.2.0. I added 

 

bcdedit /set testsigning on

 

before installing all drivers as Administrator (as recommended from INSTALL.cmd file ) .

 

Unfortunately now activating Windows 10 Pro does not work anymore. I am able to work on the VM but no more Windows Update :(

 

Did I do something wrong?

 

FYI my  VM was backed up through LVM system before adding all Xen PV Drivers.

 

 

 

Thanks.

Regards.

David

_______________________________________________
win-pv-devel mailing list
win-pv-devel@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/cgi-bin/mailman/listinfo/win-pv-devel

 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.