9.0.9000.0 install fail

[TristisOris]

win server 2022

install.log
setupapi.dev.log

[dinhngtu]

Hi, 9.0.9000.0 is a testsigned package and requires testsigning to be enabled. Did you run the testsign script, and does it say "Test Mode" on the bottom right of your desktop? If not, could you run the testsign script from an admin PowerShell window and post the output here?

[TristisOris]

it can't run because of wrong sign.

.\install.ps1 : File C:\Users\Администратор\Downloads\XenDrivers-9.0.9000.0\testsign\install.ps1 cannot be loaded. The
file C:\Users\Администратор\Downloads\XenDrivers-9.0.9000.0\testsign\install.ps1 is not digitally signed. You cannot
run this script on the current system. For more information about running scripts and setting execution policy, see
about_Execution_Policies at https:/go.microsoft.com/fwlink/?LinkID=135170.
At line:1 char:1
+ .\install.ps1
+ ~~~~~~~~~~~~~
    + CategoryInfo          : SecurityError: (:) [], PSSecurityException
    + FullyQualifiedErrorId : UnauthorizedAccess

[dinhngtu]

Try running Set-ExecutionPolicy Unrestricted first.

[TristisOris]

weird, MS recomend to use Bcdedit.exe -set TESTSIGNING ON but it didn't work. Mode is on, but script not run.
Set-ExecutionPolicy Unrestricted works a bit better.

.\install.ps1

Security warning
Run only scripts that you trust. While scripts from the internet can be useful, this script can potentially harm your
computer. If you trust this script, use the Unblock-File cmdlet to allow the script to run without this warning
message. Do you want to run C:\Users\Администратор\Downloads\XenDrivers-9.0.9000.0\testsign\install.ps1?
[D] Do not run  [R] Run once  [S] Suspend  [?] Help (default is "D"): r

Confirm
Are you sure you want to perform this action?
Performing the operation "Set up testsigned XCP-ng driver - reduces your security" on target "Local computer".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): y
The operation completed successfully.


   PSParentPath: Microsoft.PowerShell.Security\Certificate::LocalMachine\Root

Thumbprint                                Subject
----------                                -------
7B60996CB13A2F696E1439B19DAEDEC0167D5527  CN=XCP-ng Test Signer
Import-Certificate : Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
At C:\Users\Администратор\Downloads\XenDrivers-9.0.9000.0\testsign\install.ps1:21 char:1
+ Import-Certificate -FilePath $PSScriptRoot\XCP-ng_Test_Signer.crt -Ce ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Import-Certificate], UnauthorizedAccessException
    + FullyQualifiedErrorId : System.UnauthorizedAccessException,Microsoft.CertificateServices.Commands.ImportCertific
   ateCommand

[dinhngtu]

The error is not critical, you can reboot and testsigning will be enabled.
You can run the following command to reimport the driver signing certificate:

certutil -addstore -f TrustedPublisher XCP-ng_Test_Signer.crt

I'll fix the problem in the testsign install script.

[TristisOris]

installed successfully, but XO not recognized tools after reboot.

[dinhngtu]

It's a known issue since the management agent is not yet included in this version.

Management Agent is currently not included. Xen Orchestra may show "Management agent not detected", but shutdown and reboot features will work normally. We're looking to bring back features of the management agent in the next releases.

[TristisOris]

also test removal script with old xcp and citrix tools. Install new one again. Looks fine.