Openvpn tap driver windows 7 не удается проверить цифровую подпись

Первые скриншоты Windows 11 — изменения коснулись «Пуска», панели задач, интерфейса и многого другого

В Сети оказались опубликованы скриншоты, сделанные в грядущей операционной системе Windows 11 от компании Microsoft. На опубликованных изображениях демонстрируется новый пользовательский интерфейс, свежее меню «Пуск» и многое другое. Поскольку это очень ранняя сборка, некоторые элементы новой ОС остались такими же, как у текущей версии Windows 10.

 

Новый пользовательский интерфейс и меню «Пуск» в Windows 11 очень похожи на те, что изначально были в Windows 10X. Microsoft пыталась упростить интерфейс Windows для использования на устройствах с двумя экранами, но в конечном счёте отказалась от дальнейшей разработки Windows 10X. Позже компания пообещала использовать те наработки в основной версии ОС, и как видно, сдержала обещание — многие элементы легли в основу новой Windows 11.

 

Наиболее заметное визуальное отличие новой ОС связано с панелью задач. Microsoft решила сместить иконки приложений с левого нижнего края экрана в центр. Здесь же находится и новая кнопка меню «Пуск». Последняя представляет собой упрощённую версию того меню, что сегодня присутствует в Windows 10.

 

В новой версии операционной системы используются закруглённые углы окон. Контекстуальные меню, иконки, а также окно проводника — теперь всё имеет закруглённые углы, включая иконки и окна меню «Пуск».

 

На панели задач Windows 11 можно увидеть новую иконку Widgets (виджеты). Слухи о том, что компания вернёт их в новую ОС, ходят уже давно. Правда, сами виджеты из-за «сырости» версии сборки пока недогружаются. С помощью виджетов можно будет быстро узнать погоду, свежие новости и другую полезную информацию из Сети.

 

В ранней сборке Windows 11 компания пока не вносила изменения в интерфейс магазина приложений Windows Store. Прежде сообщалось, что Microsoft собирается серьёзно переработать магазин приложений и сделать его более дружелюбным не только для пользователей, но и для разработчиков приложений. Для них упростят размещение контента на платформе, а также позволят использовать в приложениях сторонние платёжные сервисы.

 

Визуально изменится и процесс установки Windows 11. Однако пользователя как и раньше будут сопровождать по каждому шагу установки и настройки новой ОС. При каждой загрузке Windows 11 пользователя будет встречать новый звук запуска системы.

 

Microsoft подробно расскажет о «следующем поколении Windows» на специальном мероприятии, которое состоится в конце этого месяца. Софтверный гигант начал рассылку приглашений на мероприятие, которое будет полностью посвящено программной платформе Windows и начнётся в 18:00 (мск) 24 июня.

 

Источник

rsk

OpenVpn Newbie
Posts: 4
Joined: Thu Dec 09, 2021 8:31 pm

TAP-Windows Adapter «cannot verify signature» (Code 52)

I downloaded and installed

Code: Select all

openvpn-connect-3.3.3.2562_signed.msi

on a Windoze 7 (64-bit) desktop.

The TAP-Windows Adapter V9 for OpenVPN Connect shows up in the Device manager with a warning symbol and the status notation

Windows cannot verify the digital signature for the drivers required for this device. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. (Code 52)

The signature verification log also shows this:

Code: Select all

tap_ovpnconnect.sys      11/12/2021     9.24.2.601          Not Signed          N/A 

However, in the Powershell, I see this when I run Get-AuthenticodeSignature .\tap_ovpnconnect.cat in the drivers\tap\amd64\win7 directory:

Code: Select all

SignerCertificate                         Status                                                                                       Path
-----------------                         ------                                                                                       ----
478646B53E3F991A02E8A04D36B178DB1AFFF851  Valid                                                                                        tap_ovpnconnect.cat

And if I «run»

from a command line, up pops a window which suggests that everything is in order.

After searching this forum for answers, I see this is a perennial problem that goes back a long ways, but I cannot find any very recent instructions on how to correct the difficulty.

I’ve installed openvpn connect on other machines, even under Windows XP, and just the other day, had no difficulty installing and running the Android version on a new phone.

I’d be grateful for some guidance.


rsk

OpenVpn Newbie
Posts: 4
Joined: Thu Dec 09, 2021 8:31 pm

Re: TAP-Windows Adapter «cannot verify signature» (Code 52)

Post

by rsk » Fri Dec 10, 2021 1:34 am

TinCanTech wrote: ↑

Thu Dec 09, 2021 9:09 pm

rsk wrote: ↑

Thu Dec 09, 2021 8:47 pm

on a Windoze 7 (64-bit) desktop

Make sure it is up to date with Micro-shaft, otherwise, it will not recognise the driver signing certificate.

At some point, I found a thread on this subject that pointed to a particular KB patch from them, but when I attempted to apply it, it said it wasn’t applicable to my version.

I still don’t quite understand how I can get past this and run OpenVPN on this machine, or just what I need to do to make the driver-signing certificate recognizable.


openvpn_inc

OpenVPN Inc.
Posts: 1332
Joined: Tue Feb 16, 2021 10:41 am

Re: TAP-Windows Adapter «cannot verify signature» (Code 52)

Post

by openvpn_inc » Sat Dec 11, 2021 9:52 pm

Hello rsk,

Just to state this outright — Windows 7 is no longer supported by Microsoft. You should switch to an updated version.

With that out of the way, OpenVPN Connect v3.3.3 does work and install just fine on Windows 7. However there is an important thing to note about Windows 7. It did not originally start out supporting drivers with SHA2 signed certificates. Microsoft eventually switched from SHA1 to SHA2 and brought out updates for Windows 7 to add that support. If your system doesn’t have that, then it can’t verify the driver.

This page on the Microsoft website explains more about this https://support.microsoft.com/en-us/top … a4cde8e64f

I can report that when I tried it just now on Windows 7 Home Premium Server Pack 1 64 bit OS, it installed correctly. There was a popup asking me if I wanted to install the driver, and I clicked install, and now it is installed and working. When I look up the driver in device management it shows up as working correctly. I attached a screenshot as proof.

I advise that you upgrade to an operating system that is actually supported today for security updates. Windows 7 no longer is getting updates. If you insist on sticking with Windows 7 then I can at least advise you that, yes, it still works. However, you may need to figure out which updates you’re missing to get the necessary support for SHA2 signed drivers in your Windows 7 installation. Or figure out what’s wrong in your OS that’s preventing things from being verified correctly.

Kind regards,
Johan

OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support


rsk

OpenVpn Newbie
Posts: 4
Joined: Thu Dec 09, 2021 8:31 pm

Re: TAP-Windows Adapter «cannot verify signature» (Code 52)

Post

by rsk » Sun Dec 12, 2021 8:20 pm

Yes, now that I understand the difficulty is that my present system cannot verify using the SHA-2 algorithm, I located the update, and will let you know after install and restart.

Thank you for taking the time and trouble to explain what is the matter so clearly.


rsk

OpenVpn Newbie
Posts: 4
Joined: Thu Dec 09, 2021 8:31 pm

Re: TAP-Windows Adapter «cannot verify signature» (Code 52)

Post

by rsk » Mon Dec 13, 2021 12:34 am

openvpn_inc wrote: ↑

Sat Dec 11, 2021 9:52 pm

. . . OpenVPN Connect v3.3.3 does work and install just fine on Windows 7. However there is an important thing to note about Windows 7. It did not originally start out supporting drivers with SHA2 signed certificates. Microsoft eventually switched from SHA1 to SHA2 and brought out updates for Windows 7 to add that support. If your system doesn’t have that, then it can’t verify the driver.

This page on the Microsoft website explains more about this https://support.microsoft.com/en-us/top … a4cde8e64f
. . .
Kind regards,
Johan

Thank you, Johan, that guidance got to me to the update patch which I needed to apply, specifically, for my system:

Security Update for Windows 7 for x64-based Systems (KB4474419)
windows6.1-kb4474419-v3-x64_b5614c6cea5cb4e198717789633dca16308ef79c.msu

I uninstalled the TAP-Windows Adapter, applied the patch, rebooted, and re-ran the OpenVPN Connect installation, chose the «repair» option, and as you said, it installed just fine, and OpenVPN Connect is now operating as expected (although I still need to configure it to use an appropriate DNS server, as it seems unable to locate certain sites—but that’s a different problem altogether.

Once again thank you very much for responding thoroughly to my naive inquiry, and pointing me toward what I needed to do. You got me past the problem and I’m up and running.


ivan.p

OpenVpn Newbie
Posts: 5
Joined: Fri Apr 01, 2022 10:54 am

Re: TAP-Windows Adapter «cannot verify signature» (Code 52)

Post

by ivan.p » Fri Apr 01, 2022 11:18 am

Hello,
I have the same problem on Windows 7 x64. The question is why SHA1 hash for tap_ovpnconnect.sys file in the catalog is wrong?

Here’s the list of files extracted from MSI (latest openvpn-connect-3.3.6.2752_signed.msi ):

Image

Tha CAT file signature is fine. You can see that CAT file contains 2 hashes:
INF — 4EA7EFACF8D968C662F43AE4723A816B53293EBC
SYS — 58CCFDF3B3A9D56CFEB36658AAEEB83220FD8A03

As you can see in the picture above, the actual SHA1 hash for INF-file is the same, but for SYS file it is different.
It’s 3CE2079895230254E1627D435365ACD3CC3E440E (and that is the hash of tap_ovpnconnect.sys located in c:\windows\system\drivers after installation)

So I believe the problem is not in that Win7 doesn’t have an update for SHA256 hashes, but in that SYS-file in the distribution doesn’t correspond the CAT-file.

Could someone look into this issue?


ivan.p

OpenVpn Newbie
Posts: 5
Joined: Fri Apr 01, 2022 10:54 am

Re: TAP-Windows Adapter «cannot verify signature» (Code 52)

Post

by ivan.p » Fri Apr 01, 2022 6:15 pm

Ahhh, my bad. Before calculating hash for driver I need to exlude PE checksum and PE certificate table reference. After doing that hashes matched.

But in this case I don’t understand why it doesn’t work: I have a plenty of unsigned sys-files in my win 7, and they do work. Maybe the timestamp of signing matters



Readers help support VPNCentral. We may get a commission if you buy through our links.

Read our disclosure page to find out how can you help VPNCentral sustain the editorial team Read more

OpenVPN users occasionally report tap driver installation issues like Windows 7 OpenVPN TAP driver unsigned.

This can have a great impact when it comes to using VPN software to prevent any third parties online from gathering and using your data.

Best VPNs we’ve tested and recommend:

There are multiple reasons behind an install failure such as broken driver, invalid or expired driver signature, and conflicting drivers, just to name a few.

Fix Tap driver

No matter the reason, we have a quick troubleshooting guide that will allow you to easily install the OpenVPN tap driver. Check out our solutions below.

Does OpenVPN work on Windows 7?

Yes, OpenVPN is compatible with older versions of Windows, including Windows 7.

The VPN client offers dedicated support for the operating system, and the configuration is pretty straightforward.

Moreover, the OpenVPN file and system impact are pretty small, so you should have no reason to worry about it affecting your PC’s performance, even if you use an older device.

How can I fix the Windows 7 OpenVPN TAP driver unsigned error?

1. Use the Internet Connections Troubleshooter

  1. Press the Win key.
  2. Type troubleshoot.
  3. Select Available Recommended troubleshooting.
  4. Click the Available troubleshooters’ hyperlink.
  5. Select Internet Connections and click Run the troubleshooter.
  6. Select Troubleshoot my connection to the internet.
    Windows 7 troubleshoot

  7. Go through the troubleshooting wizard’s steps.

2. Reset the TAP-Windows Adapter Connection

  1. Press the Start button from your taskbar.
  2. Type network in the search box.
    Windows 7 start search network

  3. Select Network status.
  4. Click on the Network and Sharing Center button.
  5. Select the Change adapter settings option.
  1. Right-click the TAP-Windows Adapter.
  2. Select Disable.
  3. Right-click the TAP-Windows Adapter again.
  4. Select Enable.
  5. Restart your PC and check if the issue is still there.

This trick can also help with the All TAP-Windows adapters are currently in use error that many Windows users encounter.

3. Reinstall TAP-Windows Adapter and VPN client

  1. Right-click on the Computer.
  2. Choose Manage.
    Windows computer manage

  3. Expand the Network adapters category.
    Network adapters

  4. Right-click the TAP-Windows Adapter V9.
    Windows tap driver

  5. Click on Uninstall device.
  6. Select Uninstall to confirm.
  7. Press the Windows key + R key combination.
  8. Type appwiz.cpl and press Enter.
  9. Select your OpenVPN software.
  10. Click on the Uninstall button to remove it.
  11. Restart your PC shortly after uninstalling both services.
  12. Reinstall your OpenVPN software + TAP adapter driver.

4. Download and install OpenVPN TAP drivers for Windows 7

Windows 7 users report they fixed this issue with the KB4474419 security update that automatically updates your Tap drivers.

  1. Download the KB4474419 Windows 7 security update.
  2. Follow the installation prompts and wait for the process to complete.
  3. Check your OpenVPN Tap drivers

This update installs SHA-2 code sign support and remediates the Windows that cannot verify the digital signature tap driver error.

Another option is to download an older OpenVPN Tap driver version:

  1. Uninstall your TAP-Windows Adapter V9 driver from the Device Manager (as presented in the third solution).
  2. Download OpenVPN Windows 7 signed tap driver (version 2.1.1.)
  3. Open and run the installer wizard.

Now the signed driver error should be remediated, as users report having issues with the 2.1.2. version. This previous version should work just fine.

If you have any problems manually installing the OpenVPN Tap drivers or want to speed up the process, you can use a dedicated third-party tool such as PC HelpSoft Driver Updater.

5. Change to a more reliable VPN

If you tried all the previous solutions and still got the Windows 7 OpenVPN tap driver unsigned issue, you might consider a better VPN alternative.

Private Internet Access, for instance, is a great VPN service that comes with its own TAP driver.

Furthermore, even if it stops working at some point, you can easily reinstall it directly from the VPN client’s configuration screen.

Private Internet Access

Benefit from advanced VPN options and dedicated support for OpenVPN and other protocols!

6. Reset Windows 7

  1. Start the computer.
  2. Press and hold the F8 key.
  3. In the Advanced Boot Options menu, choose Repair Your Computer.
windows 7 repair your computer

  1. Press Enter.
  2. Select a keyboard language and click Next.
  3. If prompted, log in with an administrative account.
  4. At the System Recovery Options, choose System Restore or Startup Repair (if this is available).

To sum up, if you notice that your OpenVPN tap driver fails to install, there are some steps that you can try from our troubleshooting guide.

However, reinstalling the TAP driver and VPN client will usually fix your issue.

If you need additional help with this VPN service, we have a guide on what to do if OpenVPN is not forwarding traffic.

In case you have an alternative solution we didn’t mention or any questions regarding the ones we listed, feel free to share it with us, in the comments section below


Vlad Turiceanu

Editor and Tech Expert

Passionate about technology, Windows, VPNs and everything that has a power button, he spent most of his time developing new skills and learning more about the tech world.

Coming from a solid background in PC building and software development, with complete expertise in touch-based devices, he is constantly focused on privacy and security in the online environment.


С правами администратора запускать пробовал, как и в режиме совместимости. Пробовал отключать антивирус. Все равно при установке клиента, в оборудовании появляется устройство с ошибкой подписи драйвера.

Проверку подписи драйвера пробовал отключать по разному:

1.Путем ввода в cmd :

bcdedit.exe -set loadoptions DISABLE_INTEGRITY_CHECKS
bcdedit.exe -set TESTSIGNING ON

2.В редакторе локальных групповых политик

3.При загрузке системы (через F8) — это единственно, что убрало ошибку подписи драйвера, но к сожалению сетевой адаптер не появился и приложение не смогло подключиться.

Часть лога подключения:

[ 2023/02/13 14:50:28 ][SecuExtender Agent][DETAIL]  Checking service (first) …
[ 2023/02/13 14:50:28 ][SecuExtender Agent][DETAIL]  SecuExtender Helper is running
[ 2023/02/13 14:50:28 ][SecuExtender Agent][DETAIL]  Try to connect to SecuExtender Helper
[ 2023/02/13 14:50:28 ][SecuExtender Agent][DETAIL]  SecuExtender Helper is connected
[ 2023/02/13 14:50:28 ][SecuExtender Agent][INFO]    [badul] try to login (наш внешний вдрес и порт)
[ 2023/02/13 14:50:28 ][SecuExtender Agent][INFO]    Connect to 2249314846:4444
[ 2023/02/13 14:50:28 ][SecuExtender Agent][INFO]    Local address is 3232246561
[ 2023/02/13 14:50:28 ][SecuExtender Agent][DEBUG]   Connect success.
[ 2023/02/13 14:50:28 ][SecuExtender Agent][DETAIL]  Handshake LoopCounter: 0
[ 2023/02/13 14:50:28 ][SecuExtender Agent][DETAIL]  7 bytes of handshake data received
[ 2023/02/13 14:50:28 ][SecuExtender Agent][DETAIL]  InitializeSecurityContext returns 0x80090302
[ 2023/02/13 14:50:28 ][SecuExtender Agent][ERROR]   **** Error 0x80090302 returned by InitializeSecurityContext (in loop) (0x2)
[ 2023/02/13 14:50:28 ][SecuExtender Agent][ERROR]   SSL handshake failed. (0x2)
[ 2023/02/13 14:50:29 ][SecuExtender Agent][ERROR]   SSL Handshake failed. (0x2)
[ 2023/02/13 14:50:29 ][SecuExtender Agent][ERROR]   Failed to connect to device(1) (0x2)
[ 2023/02/13 14:50:29 ][SecuExtender Agent][ERROR]   user login device failed (0x2)
[ 2023/02/13 14:50:29 ][SecuExtender Agent][DEBUG]   SSL Connection is going to be closed
[ 2023/02/13 14:50:29 ][SecuExtender Agent][DETAIL]  Connection ends.

  • #1

Всем привет столкнулся с проблемкой из этой статьи и решил написать фикс

У меня была проблема с драйверами они не хотели ставиться мозг я еб*л себе не долго и залез в гугл но там русс контента не нашёл и сделал свой кривой перевод после чего принялся к фиксу

Методы решения
1)Задрачивать запуск без подписи драйверов
2)Отключить проверку подписи драйверов

Решения
I

1)Перезагружаем свой кампудахтер и усердно клацаем F8
2)Выбираем Загрузка виндовс без чтения подписи драйверов
3)Далее идём по этому адресу C:\Program Files\TAP-Windows\bin там запускаем addtap.bat всё работает дальше бежим в тему про VPN и делаем всё по инструкции

ll
1)Жмём Win+R вставляем туда gpedit.msc
2)Идём по этому пути (СМ Рис1)
3)Жмём ПКМ выбераем изменить и жмём ОТКЛЮЧИТЬ (См Рис2)
4)Идём в тему про VPN и продолжаем настройку

Если что то не получилось значит вы зашли не к администратору а кликнули выше

Удачи в работе так же чекайте параметры адаптера (См Рис3)

(Киньте ТЕМУ на /getip )

  • Рис1.png

    27.5 KB

    · Просмотры: 2,398

  • Рис2.PNG

    927 байт

    · Просмотры: 1,547

  • Рис3.PNG

    4.8 KB

    · Просмотры: 1,289

Последнее редактирование:

Понравилась статья? Поделить с друзьями:
0 0 голоса
Рейтинг статьи
Подписаться
Уведомить о
guest

0 комментариев
Старые
Новые Популярные
Межтекстовые Отзывы
Посмотреть все комментарии
  • Как удалить весь офис с компьютера windows 11
  • Load on windows startup перевод
  • Tis 2000 для windows 10
  • Windows virtual usb drive
  • Как играть в sims 2 на windows 10