nvd3dumx.dll certificate not valid
-
- Site Moderator
- Posts: 20945
- Joined: 30. Dec 2009, 20:14
- Primary OS: MS Windows 10
- VBox Version: PUEL
- Guest OSses: Windows, Linux
Re: nvd3dumx.dll certificate not valid
The devs have been informed of this Nvidia problem, but they have not yet informed anyone of a time frame for a solution.
-
- Posts: 312
- Joined: 21. Apr 2010, 10:39
- Primary OS: MS Windows 7
- VBox Version: PUEL
- Guest OSses: Windows XP, 8, 10, Android x86
Re: nvd3dumx.dll certificate not valid
Oracle and Nvidia are jointly working on the issue, I have no further information than that as it was just a post on the nvidia forums.
Re: nvd3dumx.dll certificate not valid
New NVIDIA 456.71 drivers released: https://www.nvidia.com/Download/Find.aspx?lang=en-us
Confusingly this has the same version number as the hotfix driver I posted earlier. Assuming this final version may contain more changes than the prior one.
I found this snippet in their release notes: https://us.download.nvidia.com/Windows/ ... -notes.pdf
The NVIDIA security bulletin claims these drivers resolve some CVEs: https://nvidia.custhelp.com/app/answers ... a_id/5075/
Including this interesting sounding one:
Confusingly this has the same version number as the hotfix driver I posted earlier. Assuming this final version may contain more changes than the prior one.
I found this snippet in their release notes: https://us.download.nvidia.com/Windows/ ... -notes.pdf
The Microsoft KBA referenced is here: https://support.microsoft.com/en-us/hel ... s-and-wsusObtaining NVIDIA Drivers: Microsoft now provides only SHA-2 signed drivers. If your Windows 7 system is NOT equipped to detect SHA-2, you need to install the SHA-2 update support patches. For details as well as access to SHA-2 update support patches, see the Microsoft KBA "2019 SHA-2 Code Signing Support requirement for Windows and WSUS"
The NVIDIA security bulletin claims these drivers resolve some CVEs: https://nvidia.custhelp.com/app/answers ... a_id/5075/
Including this interesting sounding one:
CVE‑2020‑5980
NVIDIA Windows GPU Display Driver contains a vulnerability in multiple components in which a securely loaded system DLL will load its dependencies in an insecure fashion, which may lead to code execution or denial of service.
-
- Posts: 312
- Joined: 21. Apr 2010, 10:39
- Primary OS: MS Windows 7
- VBox Version: PUEL
- Guest OSses: Windows XP, 8, 10, Android x86
Re: nvd3dumx.dll certificate not valid
There are no code changes at all between the HF(attestation) and WHQL releases, only difference is the type of WHQL signature applied, and the availability of a Windows 7/8 version.
Re: nvd3dumx.dll certificate not valid
The problem should be fixed with 6.1.15-140873 and later. Fresh build on the https://www.virtualbox.org/wiki/Testbuilds page. Test feedback is extra appreciated this time as the changes aren't entirely trivial (we didn't used to verify more than the first signature, now we check them all).
Cheers, bird.
Cheers, bird.
Knut St. Osmundsen
Oracle Corporation
Oracle Corporation
Re: nvd3dumx.dll certificate not valid
Well I'm off to an inauspicious start...
This was after a reboot / reinstall / reboot cycle. I'll try uninstalling and then a reinstall.
Failed to open a session for the virtual machine [name].
Failed to load R0 module C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR0.r0: Not valid kernel code signature.: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR0.r0 (VERR_SUP_VP_NOT_VALID_KERNEL_CODE_SIGNATURE).
Failed to load ring-0 module 'VBoxEhciR0.r0' for device 'usb-ehci' (VERR_SUP_VP_NOT_VALID_KERNEL_CODE_SIGNATURE).
Result Code: E_FAIL (0x80004005)
Component: ConsoleWrap
Interface: IConsole {872da645-4a9b-1727-bee2-5585105b9eed}
This was after a reboot / reinstall / reboot cycle. I'll try uninstalling and then a reinstall.
Failed to open a session for the virtual machine [name].
Failed to load R0 module C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR0.r0: Not valid kernel code signature.: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR0.r0 (VERR_SUP_VP_NOT_VALID_KERNEL_CODE_SIGNATURE).
Failed to load ring-0 module 'VBoxEhciR0.r0' for device 'usb-ehci' (VERR_SUP_VP_NOT_VALID_KERNEL_CODE_SIGNATURE).
Result Code: E_FAIL (0x80004005)
Component: ConsoleWrap
Interface: IConsole {872da645-4a9b-1727-bee2-5585105b9eed}
Re: nvd3dumx.dll certificate not valid
No joy; logs attached if anyone is keen for a look.
I'm going to have to roll back as I can't have these VMs out of action for long.
I'm going to have to roll back as I can't have these VMs out of action for long.
- Attachments
-
- logs.zip
- (33.85 KiB) Downloaded 13 times
-
- Site Moderator
- Posts: 20945
- Joined: 30. Dec 2009, 20:14
- Primary OS: MS Windows 10
- VBox Version: PUEL
- Guest OSses: Windows, Linux
Re: nvd3dumx.dll certificate not valid
Elwexo, that error means your Extension Pack is out of date. EP & VB versions must match. Get the matching 6.1.15 EP.
Save the 6.1.15 Virtualbox installer. It won't be downloadable after 6.1.16 comes out, and if your Windows MSI database goes south you'll have a huge problem updating without the 6.1.15 installer.
Save the 6.1.15 Virtualbox installer. It won't be downloadable after 6.1.16 comes out, and if your Windows MSI database goes south you'll have a huge problem updating without the 6.1.15 installer.
Re: nvd3dumx.dll certificate not valid
That's odd, during the installation I was prompted to update the EP and (thought that I) did so. Will have another look.scottgus1 wrote:Elwexo, that error means your Extension Pack is out of date. EP & VB versions must match.
-
- Posts: 312
- Joined: 21. Apr 2010, 10:39
- Primary OS: MS Windows 7
- VBox Version: PUEL
- Guest OSses: Windows XP, 8, 10, Android x86
Re: nvd3dumx.dll certificate not valid
Test builds of Vbox will not download test builds of the extension pack (afaik), it will download the latest public release.Elwexo wrote:That's odd, during the installation I was prompted to update the EP and (thought that I) did so. Will have another look.scottgus1 wrote:Elwexo, that error means your Extension Pack is out of date. EP & VB versions must match.
Re: nvd3dumx.dll certificate not valid
I must have misinterpreted something - there was definitely the prompt that I'm accustomed to, to download/apply/delete the EP installer. Weird. I'll try again later.squall leonhart wrote:Test builds of Vbox will not download test builds of the extension pack (afaik), it will download the latest public release.
The installed version I upgraded from was 6.1.12, now 6.1.14 which is working normally.
-
- Volunteer
- Posts: 841
- Joined: 14. Sep 2019, 16:51
- Primary OS: Mac OS X other
- VBox Version: PUEL
- Guest OSses: WIN11,10, 7, Linux (various)
- Location: United Kingdom
Re: nvd3dumx.dll certificate not valid
I think you might be slightly confused. The pop-up prompt you get from VirtualBox relates to the 'Guest Additions' installation in Guest Machines and happens only when you launch a Virtual Machine after a VirtualBox upgrade has been performed, as the Guest Additions installer file (ISO) is included in the VirtualBox installation, ready to apply if wanted. The Extension Pack is installed on the Host machine and there is no prompt from VirtualBox (that I've ever seen) to upgrade. It cannot be included within the VirtualBox installer because it is subject to a separate; and more restrictive (non-OpenSource) License, as I understand it. It has to be downloaded and applied (upgraded) separately if its features are needed and the user is able to accept its Licence Terms.
Re: nvd3dumx.dll certificate not valid
You are correctmultiOS wrote:I think you might be slightly confused.
Re: nvd3dumx.dll certificate not valid
Womp womp. This is after installing the extension pack (same build as the test build).
I think I'll just wait for the release at this stage!
I think I'll just wait for the release at this stage!
- Attachments
-
- VBoxHardening.zip
- (19.32 KiB) Downloaded 7 times
-
- Site Moderator
- Posts: 20945
- Joined: 30. Dec 2009, 20:14
- Primary OS: MS Windows 10
- VBox Version: PUEL
- Guest OSses: Windows, Linux
Re: nvd3dumx.dll certificate not valid
A guest vbox.log, instead of the hardening log, will help us to confirm that you have installed the 6.1.15 Extension Pack to go with the 6.1.15 Virtualbox you have installed. And the vbox.log will reliably tell us if you are still getting Nvidia driver errors. Can you please post the vbox.log?