Unattended driver installation fails with code 800b0109

Question

hi there
i´m trying to install server 2012r2 unattended.
at the moment its failing while installing some driver.
the driver are signed and - as far i can see it - the signature chain is complete with no errors.
however - when i´m trying to install the driver (i´ve tried pnputil and devcon, or even manually) i get a message that the driver isnt trusted.
when i accept this message everythink is working - but its no unattended installation.
i´ve checked the setupapi.dev.log and found this:
! sig: Verifying file against specific (valid) catalog failed! (0x800b0109)
! sig: Error 0x800b0109: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
i am willing and able to install the root certificate - but which one??
how can i find out which certificate is affected?
*edit*
it seems that disabling the testsigning via bcdedit is not longer working under 2012r2
or do i need more than one step?
thx
netlord

Answer 1

Hi,
If an unsigned or invalid boot-critical device driver is installed on an x64-based computer, the computer will not boot. The unsigned or invalid boot-critical device driver
will cause a Stop error.
If you trust this driver and trying to install this unsigned driver, use /ForceUnsigned to override the requirement that drivers installed on X64-based computers must have
a digital signature. For example,
Dism /Image:C:\test\offline /Add-Driver /Driver:C:\drivers\mydriver.INF /ForceUnsigned
The related KB:
Understanding Device Drivers and Deployment
http://technet.microsoft.com/en-us/library/dd744517(v=ws.10).aspx
Signing Device Driver Packages
http://technet.microsoft.com/en-us/library/cc771511(v=ws.10).aspx
Add and Remove Drivers Offline
http://technet.microsoft.com/en-us/library/dd744355(v=ws.10).aspx
More information:
Cross-Certificates for Kernel Mode Code Signing
http://msdn.microsoft.com/en-us/library/windows/hardware/dn170454(v=vs.85).aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.