Quantcast
Channel: Setup Deployment forum
Viewing all articles
Browse latest Browse all 2818

WDS SecureBoot on x86 devices 'suddenly stopped working'

$
0
0

Hello, I've been using WDS on Windows Server 2012 R2 for quite a while now, and mostly in success.
However, yesterday the boot image that I use to boot x86 Windows 8 Client hardware (Lenovo TP10) suddenly gets a 
'Secure Boot
Image failed to verify with *ACCESS DENIED*'
Message each time i boot it. This does happen on 4 of these specific deviced; if I try booting to my x64 image on a Fujitsu E544, it works like a charm.

The reason why I say 'Suddenly stopped' is because it did work without problem (on all devices on which it does no longer..) untill yesterday evening. 
I did not change anything in the configuration; except that I tried using the boot image to create a 'Capture Image' - which failed because it is a modified boot image and the WDS Capture Client was not found inside it.
Directly after that; this behaviour started.

I've enabled logging in the 'Event Viewer > Application and Services --> Microsoft --> Windows --> Deployment-Services-Diagnostics-->Debug' and it gives me 133 events while booting, from which 3 are errors:

[Information]
[WDSServer/WDSTFTP] TftpSession[0x000000E5957068F0:192.168.48.8:1433] - Error: Received error from client. Code=8.

[Error1]
[WDSServer/WDSTFTP] [base\eco\wds\transport\server\tftp\tftpsession.cpp:1636] Expression: , Win32 Error=0x4d3

[Error2]
[WDSServer/WDSTFTP] [base\eco\wds\transport\server\tftp\tftpsession.cpp:1720] Expression: , Win32 Error=0x4d3

[Error3]
[WDSServer/WDSTFTP] [base\eco\wds\transport\server\tftp\tftpserver.cpp:1211] Expression: , Win32 Error=0x4d3

I am unable to find 0x4d3 anywhere as a consistend error message (well, I can find that it is being logged a lot, but never a meaning of it)

As I check the security of the file which is downloaded before the errors start (according to log)
[WDSServer/WDSTFTP] TptReadFile: File=W:\RemoteInstall\boot\x86\wdsmgfw.efi, Size=1286608

It says 'Everyone' can read and execute; and it is not different from the wdsmgfw.efi in the x64 folder (x64 bootting works)

The signatures seem to be OK (digitally signed 'till 04-30-2015) by microsoft)
and my date/time settings also seem to be correct (else the x64 won't work either)

I tried creating a new x86 Windows 8 boot.wim, and uploaded it without modifying it, and the problem still exists.

I'm really desperate for a solution, cause reïnstalling the WDS feature would be a major pain and I do need this solution to image x86 Windows 8 machines with WDS.

Thanks in advance,

Alex van den Bos


Viewing all articles
Browse latest Browse all 2818

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>