Bad password when unsuspending an encrypted Windows 7 VM

Discussions about using Windows guests in VirtualBox.
Post Reply
mgrant
Posts: 3
Joined: 19. Oct 2016, 01:29

Bad password when unsuspending an encrypted Windows 7 VM

Post by mgrant »

I have a Windows 7 Pro (x64) VM guest running in VirtualBox 5.0.26 r 108824 on Windows 10 x64 host. I have installed the corresponding VirtualBox Additions.

I have enabled encryption in this VM
I booted it up
It popped up the window asking me for the password
I entered the password and the machine booted up (all good, no errors)
I suspended the VM with Save to Disk
I restarted the VM
It popped up the window asking me for the password again as expected
I entered the password
It popped up the window asking me for the password again!
I entered the same password (I thought I might have typed it wrong but have tried this several times now)
I get an error:

Code: Select all

Bad password or authentication failure. 
    Details: A password with the given ID already exists. 
    Result Code: VBOX_E_OBJECT_IN_USE
        (0x80BB000C) 
    Component: ConsoleWrap 
    Interface: IConsole
I can shut the machine down gracefully. If I reboot it instead of unsuspending it, it asks me for the password and when I enter it, it boots normally without errors.

Why can't I unsuspend the virtual machine if it's encrypted? What is causing the duplicate password prompt? Is there an option I need or have I done something wrong? Or should I not expect to be able to suspend encrypted VMs?

I have attached the VBoxHardening log (zipped because it was too large to attach otherwise) and the VBox.log which if you search down for 'password' you will see the error on line 1168.
Attachments
VBoxHardening.zip
(25.04 KiB) Downloaded 9 times
VBox.log
(111.12 KiB) Downloaded 7 times
socratis
Site Moderator
Posts: 27329
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: Bad password when unsuspending an encrypted Windows 7 VM

Post by socratis »

First of all, to get the terminology right, there is no suspend/unsuspend, there is SaveState/Restore. Just so that we're on the same page.

5.0.26 is rather old, did you try a newer version? I just tried with 5.1.8 (just released) and if I save the VM state, I'm not even asked for a password when I restore it! That maybe a bug of its own, but that's another story.
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
mgrant
Posts: 3
Joined: 19. Oct 2016, 01:29

Re: Bad password when unsuspending (resuming) an encrypted Windows 7 VM

Post by mgrant »

Well, VirtualBox uses the terms 'suspending' and 'resuming' in the log files. I will try 5.1. The "Check for update" within VirtualBox does not think this is available yet.
socratis
Site Moderator
Posts: 27329
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: Bad password when unsuspending an encrypted Windows 7 VM

Post by socratis »

mgrant wrote:Well, VirtualBox uses the terms 'suspending' and 'resuming' in the log files.
You are correct, my bad. I thought that we'd go with a GUI, I didn't realize that at your first post you'd be digging in the logs ;)
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
mgrant
Posts: 3
Joined: 19. Oct 2016, 01:29

Re: Bad password when unsuspending an encrypted Windows 7 VM

Post by mgrant »

So I tried 5.1.8 r 111374 (Qt5.5.1).

Same thing, it asks me for the password twice and the second time I get the following error again:

Code: Select all

A password with the given ID already exists.

Result Code: 
VBOX_E_OBJECT_IN_USE (0x80BB000C)
Component: 
ConsoleWrap
Interface: 
IConsole {872da645-4a9b-1727-bee2-5585105b9eed}
Then I get the "Close Virtual Machine" dialogue box. This time, I just clicked Cancel. To my surprise, I'm in the VM! In fact, it seems like I can just press Cancel to the second password dialogue box and cancel the Close Virtual Machine dialogue box and I'm in, as long as I type the correct password to the first password box.

I did manage to cause a blue screen of death (BSOD) by clicking into the VM window before the password box came up though. There is a short period of time after the machine resumes and before the password dialog box is there which shows the desktop but presumably in a state before it's running because it doesn't have the key yet. I clicked and that seemed like it buried the password dialogue box and then a few seconds later, a BSOD of my computer (the host)! The error message on the BSOD was something like IRL LESS THAN OR EQUAL.

I must say that I find it a bit surprising that I should be able to see the frozen snapshot of desktop before the machine is fully decrypted and running.
Post Reply