64bit Window7 SSL sticky

[pcdebol]

It may work with some products but with the SRX5308 running the latest firmware it fails.

The problem I have run into is the SSLdrv.sys is not a signed driver. Until a signed driver is made available the driver will never load and run in Win7 64bit.

You can turn off driver signing with f8 at startup and it works like a champ. I have read some other methods to permanently disable the enforcement of driver signing but don't really want to put a bunch of computers in the field like that.

I just want to know when a signed driver is going to be made available for this product so that it can work properly with Windows 7 64?

If a signed driver is available how come it didn't come bundled with the latest firmware so that my systems will work properly running Windows 7 64.

[jmizoguchi]

forum is user to user bases so make sure to tell the support via my.netgear.com

[pcdebol]

Thanks I will let them know. It's frustrating to get a product that's advertised to support what you are using then find out it doesn't support it properly.

They forget to mention you have to run these scripts as an admin and put the computer in test mode for it to work.

bcdedit -set loadoptions DISABLE_INTEGRITY_CHECKS

bcdedit -set TESTSIGNING ON

[elmuerte]

I've got the same problem. Quite some of our employees are now on Windows 7 64bit and they are unable to use the VPN. If they used the VPN before we updated to the current firmware it worked. However, rolling back to that firmware won't help because that driver cannot be installed because the signature is no longer valid (they didn't sign with a timestamp server, so Windows 7 rejects it).
Gotta love the Windows 7 driver signature verification.

[pcdebol]

Did a support ticket with netgear. They offered me a beta firmware to resolve the issue but I passed on it. I have an OpenVpn server running the router is just going to be a backup in case the server goes down.

They did inform me the openVPN client should work with the router but gave no clues as to setting up the config file. Should be easy just need to figure out how to get it to take my certs and use them. After that creating client certs should be easy. Not to mention much better security.

[elmuerte]

I managed to find a workaround for the failing install of the Virtual Passage SSL Driver in windows 7 64bit.
The trick is to manually install an older version of the driver. I used the driver that came with the previous firmware of the SRX5308 (firmware 3.0.7-29).
After that the VPN works.

To make things easier at my company I wrapped this workaround into an installer. You can get it here:
https://system.mp-objects.com/~michi...sageSSLDrv.exe

Source of this installer is available here: https://system.mp-objects.com/~michi...-setup-src.zip (It uses innosetup)

I've only tested it with Windows 7, but it might also work with Vista. It's only for 64bit systems obviously.