[vbox-dev] Oracle VirtualBox v6.1.19 Test Build 142917 - Not working on Windows 10 Insider Dev builds

Tue Mar 2 15:50:07 GMT 2021

well, the mystery has been resolved (see the ticket). Thanks fth0 for 
looking closer than Microsoft's signature checking tools.

The latest dev build should work again, but the change in signing cert 
usage just buys about 6 weeks of time. After that we'll be in the same 
situation, because Microsoft dropped the cross-signing approach to sign 
kernel drivers. After that I fear the only way to make use of test 
builds is to set up test mode... really a pain, but outside our control.

Klaus

On 2021-02-26 22:22, Klaus Espenlaub wrote:
> getting only more mysterious: https://www.virtualbox.org/ticket/20226
> 
> No mention there of Windows 10 Insider.
> 
> Klaus
> 
> On 2021-02-26 19:00, Klaus Espenlaub wrote:
>> very mysterious... we didn't change anything regarding code signing 
>> for VirtualBox 6.1 yet (it will come, the SHA2 cert is expiring in 
>> about 3 weeks.
>>
>> Can you check/compare the installer signatures (using Explorer 
>> "Properties")? Both installers you're using the working and 
>> non-working one) should be dual signed with exactly the same certs.
>>
>> Worst case I could provide you all 6.1 builds between r142777 and 
>> r142917. Just 8 builds, and all of the changes actually rather harmless.
>>
>> Klaus
>>
>> On 2021-02-26 00:09, Jacob Klein wrote:
>>> Oracle VirtualBox v6.1.19 Test Build 142946 on Windows 10 Insider Dev 
>>> Build 21322
>>> ... is having the same "Not valid kernel code signature." error.
>>> Logs below.
>>>
>>> Please advise, if able. I may test a "Windows 10 Release" install at 
>>> some point. Thank you.
>>>
>>> 24ec.79c: SUPR3HardenedMain: Load Runtime...
>>> 24ec.79c: \Device\HarddiskVolume4\Program 
>>> Files\Oracle\VirtualBox\VBoxRT.dll: Signature #1/2: info status: 24202
>>> 24ec.79c: \Device\HarddiskVolume4\Program 
>>> Files\Oracle\VirtualBox\VBoxRT.dll: Signature #2/2: Unknown Status 
>>> -5659 (0xffffe9e5) w/ timestamp=0x60379419/link.
>>> 24ec.79c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 
>>> hMod=00007ff9c7ce0000 'C:\WINDOWS\system32\rsaenh.dll'
>>> 24ec.79c: supHardenedWinVerifyImageByHandle: -> -5659 
>>> (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll) 
>>> WinVerifyTrust
>>> 24ec.79c: Error (rc=0):
>>> 24ec.79c: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status 
>>> -5659 (0xffffe9e5) fImage=1 fProtect=0x0 fAccess=0x0 
>>> \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll: 
>>> Signature #2/2: Not valid kernel code signature.: 
>>> \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
>>> 24ec.79c: supR3HardenedWinVerifyCacheInsert: 
>>> \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
>>> 24ec.79c: Error (rc=0):
>>> 24ec.79c: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program 
>>> Files\Oracle\VirtualBox\VBoxRT.dll' (C:\Program 
>>> Files\Oracle\VirtualBox\VBoxRT.dll): rcNt=0xc0000190
>>> 24ec.79c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 
>>> 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
>>> 24ec.79c: Error -610 in supR3HardenedMainInitRuntime! (enmWhat=4)
>>> ------------------------------------------------------------------------
>>> *From:* Jacob Klein
>>> *Sent:* Wednesday, February 24, 2021 5:39 PM
>>> *To:* vbox-dev at virtualbox.org <vbox-dev at virtualbox.org>
>>> *Subject:* Oracle VirtualBox v6.1.19 Test Build 142917 - Not working 
>>> on Windows 10 Insider Dev builds
>>> Hello,
>>>
>>> Oracle VirtualBox v6.1.19 Test Build 142917
>>> ... gets an error trying to start a VM after using Import Appliance, 
>>> on Windows 10 Insider Dev builds.
>>>
>>> The problem might be specific to changes in the Test Builds of your app:
>>> Oracle VirtualBox v6.1.19 Test Build 142917 - Problem happens.
>>> Oracle VirtualBox v6.1.19 Test Build 142777 - Problem does NOT happen.
>>>
>>> I realize I'm using an Insider build, but because it was an upgrade 
>>> of the VirtualBox Test Build (and Extension Pack) that made the 
>>> problem start happening, I felt obligated to inform you. I don't 
>>> expect an immediate fix. Again, I wanted to inform.
>>>
>>> The error is:
>>> Failed to open a session for the virtual machine MSEdge - Win10.
>>> The virtual machine 'MSEdge - Win10' has terminated unexpectedly 
>>> during startup with exit code 1 (0x1).  More details may be available 
>>> in 'E:\VirtualBox VMs\MSEdge - Win10\Logs\VBoxHardening.log'.
>>>
>>> VBoxHardening says the following:
>>> 27d8.39f0: SUPR3HardenedMain: Load Runtime...
>>> 27d8.39f0: \Device\HarddiskVolume4\Program 
>>> Files\Oracle\VirtualBox\VBoxRT.dll: Signature #1/2: info status: 24202
>>> 27d8.39f0: \Device\HarddiskVolume4\Program 
>>> Files\Oracle\VirtualBox\VBoxRT.dll: Signature #2/2: Unknown Status 
>>> -5659 (0xffffe9e5) w/ timestamp=0x60353c8e/link.
>>> 27d8.39f0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 
>>> hMod=00007ff9c7ce0000 'C:\WINDOWS\system32\rsaenh.dll'
>>> 27d8.39f0: supHardenedWinVerifyImageByHandle: -> -5659 
>>> (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll) 
>>> WinVerifyTrust
>>> 27d8.39f0: Error (rc=0):
>>> 27d8.39f0: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status 
>>> -5659 (0xffffe9e5) fImage=1 fProtect=0x0 fAccess=0x0 
>>> \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll: 
>>> Signature #2/2: Not valid kernel code signature.: 
>>> \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
>>> 27d8.39f0: supR3HardenedWinVerifyCacheInsert: 
>>> \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
>>> 27d8.39f0: Error (rc=0):
>>> 27d8.39f0: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program 
>>> Files\Oracle\VirtualBox\VBoxRT.dll' (C:\Program 
>>> Files\Oracle\VirtualBox\VBoxRT.dll): rcNt=0xc0000190
>>> 27d8.39f0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 
>>> 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
>>> 27d8.39f0: Error -610 in supR3HardenedMainInitRuntime! (enmWhat=4)
>>> 27d8.39f0: LoadLibrary "C:\Program 
>>> Files\Oracle\VirtualBox/VBoxRT.dll" failed (rc=1790)
>>> 27d8.39f0: \Device\HarddiskVolume4\Program 
>>> Files\Oracle\VirtualBox\VirtualBoxVM.dll: Signature #1/2: info 
>>> status: 24202
>>> 27d8.39f0: \Device\HarddiskVolume4\Program 
>>> Files\Oracle\VirtualBox\VirtualBoxVM.dll: Signature #2/2: Unknown 
>>> Status -5659 (0xffffe9e5) w/ timestamp=0x60353ca4/link.
>>> 27d8.39f0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 
>>> hMod=00007ff9c7ce0000 'C:\WINDOWS\system32\rsaenh.dll'
>>> 27d8.39f0: supHardenedWinVerifyImageByHandle: -> -5659 
>>> (\Device\HarddiskVolume4\Program 
>>> Files\Oracle\VirtualBox\VirtualBoxVM.dll) WinVerifyTrust
>>> 27d8.39f0: Error (rc=0):
>>> 27d8.39f0: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status 
>>> -5659 (0xffffe9e5) fImage=1 fProtect=0x0 fAccess=0x0 
>>> \Device\HarddiskVolume4\Program 
>>> Files\Oracle\VirtualBox\VirtualBoxVM.dll: Signature #2/2: Not valid 
>>> kernel code signature.: \Device\HarddiskVolume4\Program 
>>> Files\Oracle\VirtualBox\VirtualBoxVM.dll
>>> 27d8.39f0: supR3HardenedWinVerifyCacheInsert: 
>>> \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
>>> 27d8.39f0: Error (rc=0):
>>> 27d8.39f0: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program 
>>> Files\Oracle\VirtualBox\VirtualBoxVM.dll' (C:\Program 
>>> Files\Oracle\VirtualBox\VirtualBoxVM.dll): rcNt=0xc0000190
>>> 27d8.39f0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 
>>> 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
>>> 259c.2a9c: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 
>>> (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 516 ms, the end);
>>> 3a6c.3108: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 
>>> (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 934 ms, the end);
>>>
>>> Thanks for anything you can do to resolve this,
>>> Jacob Klein