{"id":613,"date":"2016-08-19T23:40:00","date_gmt":"2016-08-20T06:40:00","guid":{"rendered":"https:\/\/kb.terabyteunlimited.com\/kb-articles\/new-driver-signing-uses-sha256-as-required-by-microsoft\/"},"modified":"2021-09-07T15:05:19","modified_gmt":"2021-09-07T22:05:19","slug":"new-driver-signing-uses-sha256-as-required-by-microsoft","status":"publish","type":"lsvr_kba","link":"https:\/\/www.terabyteunlimited.com\/kb\/kb-articles\/new-driver-signing-uses-sha256-as-required-by-microsoft\/","title":{"rendered":"New Driver Signing uses SHA256 as Required by Microsoft"},"content":{"rendered":"<p><strong><font color=\"#ff5500\">Problem:<\/font><\/strong> <\/p>\r\n  <p>Installing Image for Windows, PHYLock, or TBIMount on versions of Windows 7 or Windows Server 2008 R2 results in an error message that a digitally signed driver is required. The message is displayed after the installation has completed and, in the case of a reboot being necessary, may appear after the option to restart the system has already been selected. Note that on some systems a warning will not be displayed.<\/p>\r\n  <p>This issue does not affect Windows 8.0 or later.<\/p>\r\n  <p>Example error:<\/p>\r\n  <blockquote>\r\n    <p><font color=\"#ff0000\">Windows requires a digitally signed driver<br \/>\r\n      <br \/>\r\n      A recently installed program tried to install an unsigned <br \/>\r\n      driver. This version of Windows requires all drivers to have a<br \/>\r\n      valid digital signature. The driver is unavailable and the<br \/>\r\n      program that uses this driver might not work correctly.<br \/>\r\n      <br \/>\r\n      Uninstall the program or device that uses this driver and<br \/>\r\n      check the publisher's support website to get a digitally<br \/>\r\n      signed driver.\r\n      <br \/>\r\n      <br \/>\r\n      Driver: phylock<br \/>\r\n      Service: phylock<br \/>\r\n      Publisher: TeraByte, Inc.<br \/>\r\n      Location: C:&#92;Windows&#92;System32...&#92;phylock.sys<\/font><\/p>\r\n  <\/blockquote>\r\n<p>In the case of the phylock.sys driver, booting the system in this state will result in Windows failing to start. In most cases, Windows will boot to the Recovery Environment (WinRE) and perform a Startup Repair, which will use System Restore to return the system to a bootable state. The root cause found would be reported as &quot;Boot critical file ...&#92;phylock.sys is corrupt.&quot;<\/p>\r\n  <p><strong><font color=\"#ff5500\">Cause:<\/font><\/strong> <\/p>\r\n  <p>The Windows installation is not updated (Microsoft issued updates to add support for SHA-2 signing and verification functionality in March 2015).<\/p>\r\n  <p><strong><font color=\"#ff5500\">Solution:<\/font><\/strong><\/p>\r\n  <p>There are several options available to resolve this issue:<\/p>\r\n  <ul>\r\n    <li>Update Windows so that it's current (recommended). At the very least, it's necessary to install <strong>KB3033929<\/strong> to add support for SHA-2. Links to the update and instructions for the affected versions of Windows can be found at the following Microsoft page:      <a href=\"https:\/\/technet.microsoft.com\/en-us\/library\/security\/3033929\" target=\"_blank\" rel=\"noopener\">https:\/\/technet.microsoft.com\/en-us\/library\/security\/3033929<\/a> <br \/>\r\n      <br \/>\r\n    <\/li>\r\n    <li>When booting Windows, press <strong>F8<\/strong> to enter the <strong>Advanced Boot Options<\/strong> menu. On that menu, select the <strong>Disable Driver Signature Enforcement<\/strong> option. This&nbsp;allows the system to boot with the driver still installed.<br \/>\r\n    <\/li>\r\n  <\/ul>\r\n  <p>For more details, please refer to the following Microsoft KB article:<br \/>\r\n    <a href=\"https:\/\/technet.microsoft.com\/en-us\/library\/security\/3033929\" target=\"_blank\" rel=\"noopener\"><strong>Microsoft Security Advisory 3033929<\/strong><\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Problem: Installing Image for Windows, PHYLock, or TBIMount on versions of Windows 7 or Windows Server 2008 R2 results in an error message that a digitally signed driver is required. The message is displayed after the installation has completed and, in the case of a reboot being necessary, may appear after the option to restart [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"lsvr_kba_cat":[1790],"lsvr_kba_tag":[2121],"class_list":["post-613","lsvr_kba","type-lsvr_kba","status-publish","hentry","lsvr_kba_cat-problem-solving-image-for-windows","lsvr_kba_tag-image-for-windows"],"_links":{"self":[{"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/lsvr_kba\/613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/lsvr_kba"}],"about":[{"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/types\/lsvr_kba"}],"author":[{"embeddable":true,"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/comments?post=613"}],"version-history":[{"count":1,"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/lsvr_kba\/613\/revisions"}],"predecessor-version":[{"id":6360,"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/lsvr_kba\/613\/revisions\/6360"}],"wp:attachment":[{"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/media?parent=613"}],"wp:term":[{"taxonomy":"lsvr_kba_cat","embeddable":true,"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/lsvr_kba_cat?post=613"},{"taxonomy":"lsvr_kba_tag","embeddable":true,"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/lsvr_kba_tag?post=613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}