Xen project Mailing List

To make Windows7 recognize SHA256 signatures, should install KB3033929(https://technet.microsoft.com/en-us/library/security/3033929 ).

Now I can install win-pv-8.2.

Thanks

-Kangjie

发件人: Paul Durrant [mailto:Paul.Durrant@xxxxxxxxxx]
发送时间: 2017年4月19日 17:12
收件人: 席康杰
抄送: win-pv-devel@xxxxxxxxxxxxxxxxxxxx
主题: RE: Windows 7 signature issues

Thanks. Indeed it is still a cert issue:

! sig: VerifyTrustFailed for C:\Windows\system32\SETBE92.tmp.

! sig: Error 0x800b0109: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.

cpy: Source File 'C:\Windows\system32\SETBE92.tmp' is NOT signed NT5 Crypto.

And later:

!!! dvi: Device not started: Device has problem: 0x34: CM_PROB_UNSIGNED_DRIVER.

So it looks like your Windows installation is still unable to understand SHA256 certs.

Cheers,

Paul

From: 席康杰 [mailto:xikangjie@xxxxxx]
Sent: 19 April 2017 10:02
To: Paul Durrant <Paul.Durrant@xxxxxxxxxx>
Cc: win-pv-devel@xxxxxxxxxxxxxxxxxxxx
Subject: 答复: Windows 7 signature issues

I reinstalled the xenbus of winpv-8.2 again, attachment is the setupapi.dev.log.

Thanks

-Kangjie

发件人: Paul Durrant [mailto:Paul.Durrant@xxxxxxxxxx]
发送时间: 2017年4月19日 16:35
收件人: 席康杰
抄送: win-pv-devel@xxxxxxxxxxxxxxxxxxxx
主题: RE: Windows 7 signature issues

Could you send me your setupapi.dev.log file? (It’s in C:\Windows\inf). That will contain more information on the reason for installation failure. The univention drivers are signed with a SHA1 cert so your issue does still sound like a SHA1 vs. SHA256 issue.

Paul

From: 席康杰 [mailto:xikangjie@xxxxxx]
Sent: 19 April 2017 08:53
To: Paul Durrant <Paul.Durrant@xxxxxxxxxx>
Cc: win-pv-devel@xxxxxxxxxxxxxxxxxxxx
Subject: 答复: Windows 7 signature issues

Hi,

The KB2949927 has been replaced by KB3123479(https://support.microsoft.com/zh-cn/help/2949927/microsoft-security-advisory-availability-of-sha-2-hashing-algorithm-for-windows-7-and-windows-server-2008-r2-october-14,-2014), but after I installed KB3123479, I still failed to install windows-pv-8.2, the errors are same as last email.

If this problem can’t be solved, I have to switch to GPLPV-drivers(http://wiki.univention.com/index.php?title=Installing-signed-GPLPV-drivers ), which works well.

Thanks

-Kangjie

发件人: Paul Durrant [mailto:Paul.Durrant@xxxxxxxxxx]
发送时间: 2017年4月18日 21:09
收件人: 席康杰
抄送: win-pv-devel@xxxxxxxxxxxxxxxxxxxx
主题: Windows 7 signature issues

Hi,

Please don’t hijack old threads.

I checked the signature on 8.2 xenbus.sys and it looks good to me. Are you perhaps running an unpatched Windows 7 that has not been updated to understand SHA-256 certs? (See https://technet.microsoft.com/en-us/library/security/2949927.aspx).

Cheers,

Paul

From: 席康杰 [mailto:xikangjie@xxxxxx]
Sent: 18 April 2017 12:12
To: Paul Durrant <Paul.Durrant@xxxxxxxxxx>
Subject: 答复: [win-pv-devel] Windows 10 Pro Activation stopped after installing 8.2 drivers

Hi Paul,

You said the released drivers are signed, but when I install win-pv-8.2 on windows7 x64, get warning “Windows requires a digitally signed driver”, below is the screenshot:

When I reboot the system , the system failed to start, “Windows can not verify the digital signature of this file”, below is the screenshot.

What should I do?

Thanks

-Kangjie

发件人: win-pv-devel [mailto:win-pv-devel-bounces@xxxxxxxxxxxxxxxxxxxx] 代表 Paul Durrant
发送时间: 2017年4月3日 20:37
收件人: 'David TECHER'; win-pv-devel@xxxxxxxxxxxxxxxxxxxx
主题: Re: [win-pv-devel] Windows 10 Pro Activation stopped after installing 8.2 drivers

Hi David,

I suspect it is turning on testsigning that is stopping Windows Update. You don’t need to turn testsigning on for released drivers though. They are signed so should just be able install them (clicking through the trust dialog on the way). It’s only development builds that will need testsigning enabled.

Cheers,

Paul

From: win-pv-devel [mailto:win-pv-devel-bounces@xxxxxxxxxxxxxxxxxxxx] On Behalf Of David TECHER
Sent: 03 April 2017 13:14
To: win-pv-devel@xxxxxxxxxxxxxxxxxxxx
Subject: [win-pv-devel] Windows 10 Pro Activation stopped after installing 8.2 drivers

Hi ALL,

This weekend I set up Windows 10 Pro 64 Bits as a VM (+ VGA Passthrough = GTX 680 harcoded to GRID K2).

I used Xen 4.3.4 on a Linux Kernel 3.19.

The VM is able to boot and works fine.

I installed all PV Drivers for 8.2.0. I added

bcdedit /set testsigning on

before installing all drivers as Administrator (as recommended from INSTALL.cmd file ) .

Unfortunately now activating Windows 10 Pro does not work anymore. I am able to work on the VM but no more Windows Update :(

Did I do something wrong?

FYI my VM was backed up through LVM system before adding all Xen PV Drivers.

Thanks.

Regards.

David

[win-pv-devel] 答复: Windows 7 signature issues