Endpoint Protection

  • Private Community
 View Only
Back to discussions
Expand all | Collapse all

12.1.6 MP8 Install failure: "A digitally signed driver is required"

ℬrίαη

ℬrίαηJun 05, 2017 06:20 PM

Probably time for a support call :\
AndrewIT

AndrewITJun 20, 2017 04:42 AM

have you same news ?
AndrewIT

AndrewITJun 20, 2017 04:54 AM

Support case created Case Number 12605880

  • 1.  12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 05, 2017 05:52 PM

    I'm attempting to install MP8 on a Win10 (anniversary update) machine, and I'm getting the following two pop ups:

    SEP Install Error.JPG

    Sadly, the install will not complete, and keeps asking for a reboot (yellow excalmation on the shield). I checked the install log, and no "Return value 3".

    Seems like this a Microsoft issue, so I temporarily disabled the requirement for driver signing...no change.

    Did I miss a memo somewhere?

    Thanks,

    -Mike



  • 2.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 05, 2017 05:57 PM

    MP8 should have basic support on Win10:

    http://www.symantec.com/docs/DOC10506

    Is the box fully patched up? I remember this happening awhile back but there was a specific MS patch missing.



  • 3.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 05, 2017 06:15 PM

    Thanks for the reply Brian.

    I almost responded right away with a "heck yes, fully patched!", but when I checked, I was missing: 2017-05 Update for Windows 10 Version 1607 for x64-based Systems (KB3150513)

    Now that I've installed that patch, I can safely say, "heck yes, fully patched!".

    Unfortunately, it made no difference, and I'm getting the same driver error's during installation. The error occurs both on upgrades from MP7, and on clean installs.

    Thanks for the suggestion amigo.

    Symantec, any thoughts?

    -Mike

     



  • 4.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 05, 2017 06:20 PM

    Probably time for a support call :\



  • 5.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 05, 2017 10:46 PM

    I have the same issue. I've tried Win10 (Anniversary Update and Creators Update) w or w/o fully patched but nothing was going to be changed...



  • 6.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 06, 2017 11:19 AM

    Support case created...will let you know how that goes.



  • 7.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 14, 2017 05:13 AM

    Hi,

     

    Has there been any update to this issue or fix applied? 

    We have upgraded to 12.1.6 MP8 and are seeing this exact issue. 

    We have disabled driver signing checks temporarily but this is not ideal.

     

    Thanks



  • 8.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 20, 2017 03:34 AM

    i have the same problem and i need a solution



  • 9.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"
    Best Answer

    Posted Jun 20, 2017 04:01 AM

    we found a workaround to disable secure boot in the bios.

    Still poor that symantec havent spotted this before.



  • 10.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 20, 2017 04:42 AM

    have you same news ?



  • 11.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 20, 2017 04:54 AM

    Support case created

    Case Number 12605880



  • 12.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Broadcom Employee
    Posted Jun 20, 2017 06:37 AM

    I suggest:

    1. uninstall SEP using latest cleanwipe>reboot

    ​Make sure OS is updated. 


    2.  Disable secure reboot
    https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/disabling-secure-boot

    3. Install SEP>reboot machine



  • 13.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 20, 2017 09:12 AM

    Well the cupie doll goes to David R123!!

    Sure enough, disabling Secure Boot in the BIOS did the trick. Not sure how I'm going to do that to 20K machines while sitting at my desk...but hey, job security!!

    I'm on my second Symantec support engineer (case 12548082), and so far their solution has been to install SEP 14 MP2, which at this point, I'm not ready to do.

    Thanks David...you got the ball rolling for me again.

    -Mike

    P.S. I no longer see a way to mark his comment as the solution... :(



  • 14.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 21, 2017 04:54 AM

    "1. uninstall SEP using latest cleanwipe>reboot

    ​Make sure OS is updated. 

    2.  Disable secure reboot
    https://docs.microsoft.com/en-us/windows-hardware/...

    3. Install SEP>reboot machine"

    i tryed this and it works after the last reboot, is possible to enable the secure reboot ?



  • 15.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 21, 2017 12:15 PM

    @AndrewIT: At least on the machines I've tested, "Secure Boot" must remain disabled for the "Unsigned" 12.1.6 MP8 drivers to load upon boot up.

    Maybe someone from Symantec can explain why the MP8 drivers arn't/can't be digitally signed/trusted? What changed with the drivers from MP7?

    From my overly pessimistic perspective, this feel like a passive aggressive move on Symantec's part to get (aka...force) everyone with newer hardware/software to upgrade to SEP 14.

    -Unhappy camper


    P.S. Did anybody else know that "Secure Boot" is a sub-component of the Device Guard feature in Windows 10? I was told this by a Symantec engineer. So technically Brian, your earlier reference to: http://www.symantec.com/docs/DOC10506 may have been closer to the issue than I thought.



  • 16.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Broadcom Employee
    Posted Jun 21, 2017 12:26 PM

    Hello iamadmin,

    I appogize for the issues you are having with 12.1. MP 8.  SEP 12.1.x does not support secure boot/device guard or HVCI.  Support for those was added in SEP 14.

    Please see the following articles for more information.


    Release notes, new fixes, and system requirements for all versions of Endpoint Protection
    TECH163829 June 2nd, 2017 http://www.symantec.com/docs/TECH163829

    Endpoint Protection support for Windows 10 Anniversary Update, Creators Update, and Windows Server 2016
    TECH235458 June 20th, 2017 http://www.symantec.com/docs/TECH235458

    Thanks,

    Jon

     

     



  • 17.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 21, 2017 04:14 PM

    Thank you for the information jondkauf, sadly neither of these pages (as far as I can see) explain what changed between 12.1.6 MP7 to 12.1.6 MP8, which caused the MP8 install to fail on a machine that has Secure Boot enabled, while MP7 did/does not.

    According to the document you referenced: http://www.symantec.com/docs/TECH235458 SEP 12.1 RU6 MP5 and later have "Basic Compatibility", I would take that to mean that the installers should work the same as well, that said, it appears the MP7 installer has WHQL signed drivers, whereas I assume MP8 installer does not...that is my issue.

    At this point I'm not interested in Device Guard and/or Credential Guard, their relatively new features, but Secure Boot is a different beast, and it has been around and functioning just fine with SEP for years...until now. The more I get the run around on my questions, the more I firmly believe this was a conscious choice on Symantec's part to force their customers from 12.1.x to 14.x.

    Enuff said, unless someone can give me some technical reasons why MP7 worked, and MP8 doesn't, I'll save my words until our next contract renewal.



  • 18.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Broadcom Employee
    Posted Jun 22, 2017 01:53 PM

    Hello Iamadmin,

    I am working with our engineering team to determe why there is a change between MP 7 and MP 8 , though as has been before Secure boot, Device Guard and HVCI have never been supported with the 12.1.x product line. 

    Thank you

    Jon Kaufman
    Sr. Principal Technical Support Engineer
    Customer Engineering And Loyalty (CEAL)
    Symantec Corporation
    www.symantec.com

     



  • 19.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 22, 2017 03:50 PM

    Thank you for looking into this Jon I, for one, anxiously await the result of your inquiry.

    -Mike

    P.S. And while Secure Boot may not have been supported with the 12.1.x product line, it was never a show stopper to installing the 12.1.x SEP client...until MP8.



  • 20.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 23, 2017 04:25 AM

    i have some pc with win 10 and i have 2 case:

    1) first upgrade to win 10 to  version 1703 and then try upgrade to sep client 12.6MP8 --> get the problem of this topic. must disable secure boot

     

    2) first upgrade to sep client 12.6MP8 and then upgrade to win 10 to  version 1703 --> no problem. and secure boot is enabled

     

    WHY ???



  • 21.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 23, 2017 04:27 AM

    i think this is interesting

     

    i have same pc with win 10 and i have 2 case:

    1) first upgrade to win 10 to  version 1703 and then try upgrade to sep client 12.6MP8 --> get the problem of this topic. must disable secure boot

    2) first upgrade to sep client 12.6MP8 and then upgrade to win 10 to  version 1703 --> no problem. and secure boot is enabled

    WHY ???

    there are some reasons for this ???



  • 22.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jun 23, 2017 09:01 AM

    Very good question AndrewIT, I wish I knew the answer. Maybe when Jon Kaufman has finished working with his engineering team, he will have all the answers that we seek. Sorry Jon, no pressure or anything. ;-)

    -Mike



  • 23.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Broadcom Employee
    Posted Jun 26, 2017 11:42 AM

    Hello Iamadmin,

    Our drivers our signed, just not the way that is neede for Secure boot.  Please see the following article regarding this issue


    Program Compatibility Assistant prompts "A digitally signed driver is required" when attempting to install SEP 12.1 RU6 MP8 on Windows 10 with Secure Boot enabled
    TECH246824 June 23rd, 2017 http://www.symantec.com/docs/TECH246824

    Thanks,

     



  • 24.  RE: 12.1.6 MP8 Install failure: "A digitally signed driver is required"

    Posted Jul 03, 2017 12:14 PM

    Thanks for the link to the article Jon. While this makes it "official" that MP8 will never install on a Win10 machine with Secure Boot enabled, the question still remains as to why MP7 works just fine, but MP8 doesn't. It seem like Symantec would strive to do their best to support their long standing customers...and if what a Symantec engineer told me us true, and MP8 is the last SEP 12.1 version, then why not end on a high note making SEP 12.1.6 MP8 as compatible as its predecessors. Unless there was a technical reason for doing this (which so far I've not heard of none) then I believe it was a management call to neuter MP8.

    Shame on you, Symantec.