VirtualBox

Opened 15 months ago

Last modified 14 months ago

#22004 new defect

VirtualBox on MacOSX Host installs 'provisioning profile' signed with expired certificate.

Reported by: nesto Owned by:
Component: VMM/HWACCM Version: VirtualBox-7.0.14
Keywords: VT-x, certificate, profile, expired Cc: nesto
Guest type: all Host type: Mac OS X

Description

On my Macbook Pro (OS Montery v 12.7.3), installing VirtualBox installs a profile, location:

System Preferences -> Profiles.

This profile turns up 'unverified'. Apparently it is signed with a now expired certificate.

Implications: the virtualization hardware VT-x on the system (intel chipset) is inaccessible.

Suggested solution: please sign the profile with a valid certificate.

Attachments (2)

profile_screenshot.png (294.4 KB ) - added by nesto 15 months ago.
profile screen shot
VBox.log (105.2 KB ) - added by nesto 15 months ago.

Download all attachments as: .zip

Change History (9)

by nesto, 15 months ago

Attachment: profile_screenshot.png added

profile screen shot

comment:1 by Klaus Espenlaub, 15 months ago

Confirmed (expired a year ago)... and it's lacking an up to date Apple signature, not an Oracle one.

Yet another task we have to do (through someone else at Oracle who actually has access) at least every 6 months to have a product which users can run. Apple's profile handling is really making their platform a pain (and it really doesn't help that Apple's developer portal doesn't show such expired profiles at all, instead it says that the profile can be downloaded until February 2027).

Let's see how quickly we can get this sorted.

comment:2 by Klaus Espenlaub, 15 months ago

Any idea why you're the only person who has reported this so far? The provisioning profile's signature by Apple didn't expire exactly yesterday, and we know there are many users of VirtualBox 7.0.x on macOS.

comment:3 by Klaus Espenlaub, 15 months ago

Can you attach a VBox.log file of a VM which fails to run? So that we can see the symptoms and maybe create better diagnostics.

in reply to:  2 comment:4 by nesto, 15 months ago

Replying to Klaus Espenlaub:

Any idea why you're the only person who has reported this so far? The provisioning profile's signature by Apple didn't expire exactly yesterday, and we know there are many users of VirtualBox 7.0.x on macOS.

Maybe this problem does not exist in the newer Mac OS versions. I run a bit older OS (Montery 12.7.3) because my Macbook edition is mid 2015 and this OS is the newest one it allows me to install. Except for the VT-x issue, still working perfectly.

by nesto, 15 months ago

Attachment: VBox.log added

comment:5 by Klaus Espenlaub, 15 months ago

The log proves that the VM is actually getting past the BIOS which means it is running in general. But there are some "AppleHV" messages which don't look entirely normal.

in reply to:  5 comment:6 by nesto, 15 months ago

Well yes, the guest is running and I can still work in it (vim text editing), but without VT-x it is just not very fluent and it generates a high load on the host system. BTW, thank you Klaus for promptly picking up this issue! Not sure if it is helpful, I think this is the newer certificate referenced in the System->Profiles Certificate Error message: https://www.apple.com/certificateauthority/AppleWWDRCAG3.cer

Replying to Klaus Espenlaub:

The log proves that the VM is actually getting past the BIOS which means it is running in general. But there are some "AppleHV" messages which don't look entirely normal.

Last edited 14 months ago by nesto (previous) (diff)

comment:7 by Klaus Espenlaub, 15 months ago

With VirtualBox 7.0 there is no direct use of VT-x any more, and I don't think our code should fall back all the way to software emulation (which currently would be one instruction at a time type emulation which is super slooooooow). Apple pulled the plug on using it directly through a kernel extension (7.0 does not come with kernel extensions from our team any more).

Note: See TracTickets for help on using tickets.

© 2025 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy Automated Access Etiquette