Link to home
Start Free TrialLog in
Avatar of djsix
djsix

asked on

Unable to install the GVC SonicWall VPN client 4.2.6 on WIndows 2000 service pack 4: UpdateDriverForPlugAndPlayDevices(2) failed - virtual adapter can not be installed

Hello,

I am getting this error message when trying to install GVC SonicWall 4.2.6 on Windows 2000 service pack 4:

UpdateDriverForPlugAndPlayDevices(2) failed - virtual adapter can not be installed.
Error = No data is available.
path = 'C:\Program Files\SonicWALL\SonicWALL Global VPN Client\ ... \netSWVNIC.inf'

I tried just about everything I could, including a clean up of the "Deterministic Network Enhancer", with no luck.  How can I get SonicWall VPN client installed on my system? User generated image User generated image
ASKER CERTIFIED SOLUTION
Avatar of digitap
digitap
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of djsix
djsix

ASKER

Hi digitap:

The only client I've tried to install so far is the 4.2.6 one which is publicly available on their website as a download.  Is there a way to download older clients without an account?
Avatar of djsix

ASKER

Oh, I see we can freely create an account on mysonicwall.com - please disregard my last question.  Will try to download older clients and let you know of the outcome.
Avatar of djsix

ASKER

Ok - got further now.  From www.mysonicwall.com I created an account and downloaded an older version of SW GVC:  4.0.0.842.  I successfully installed the client on Windows 2000 service pack 4.  The installer completed cleanly.

However when trying to launch the client, I get a new error message:


sonicwall-startup-error.jpg
Avatar of djsix

ASKER

(The error dialog says: "Failed to create the configuration file 'C:\Documents and Settings\NumberSIX\Application Data\SonicWALL\SonicWALL Global VPN Client\SonicWALL Global VPN Client.rcf'.  Failed to encrypt the configuration file data.").

Any clues?
Avatar of djsix

ASKER

I found this thread where someone had the same problem as me:

https://www.experts-exchange.com/questions/24634604/SonicWall-VPN-Client-Install-error.html

I'm guessing this default.rcf file will come from my IT department, who's providing me with VPN access to work network from home.  Will let you know about the outcome.

Thanks for all the help so far!
Glad I could get you pointed in the right direction.

Yes, that error just indicates something wrong in the default RCF file, which is no big deal for you.  There's two ways to configure access with the GVC.  One just requires a new connection and authentication happens by the sonicwall via RADIUS or the user database directly on the Sonicwall.  As you suggest, the other is receiving a new RCF file.  Your IT department will either create this RCF or they'll export the RCF from the GroupVPN configuration on the Sonicwall.
Avatar of djsix

ASKER

Got the RCF file today, tried it at home, but I am still out of luck.

I tried to name it "default.rcf",

1) put it in "C:\Program Files\SonicWALL\SonicWALL Global VPN Client".
2) Also tried to put it in "C:\Documents and Settings\NumberSIX\Application Data\SonicWALL\SonicWALL Global VPN Client".

3) Then I tried to rename it as "SonicWALL Global VPN Client.pcf", still no luck.

In all three cases I still got the same error message.

"Failed to create the configuration file 'C:\Documents and Settings\NumberSIX\Application Data\SonicWALL\SonicWALL Global VPN Client\SonicWALL Global VPN Client.rcf'.  Failed to encrypt the configuration file data."
Avatar of djsix

ASKER

I read the following instructions very carefully and still I can't figure out what I'm doing wrong:

http://www.sonicwall.com/downloads/Creating_and_Deploying_the_Default_.RCF.pdf
OK...then try this.  Do you have the original file?  If so, save it to the root of your laptop.  Then, launch the GVC and click File > Import.  Click the button with the ellipses at the end of the first box.  When the "Import configure file" window appears, navigate to the root of the C: drive, click the file you saved and click Open.  Then click OK.

Let me know what happens.

Also, you've disabled any anti-virus during the install, right?  And, you have local administrator rights, right?
Avatar of djsix

ASKER

I found a log file in C:\Program Files\SonicWALL\SonicWALL Global VPN Client:

gvc_trace.txt

Here's what it reveals:

Loaded IPHLPAPI.DLL - Will use when appropriate
Failed to get the GetAdaptersAddresses process address
Warning: Failed to get the SnmpExtensionQueryEx process address
Warning: Failed to get the SnmpExtensionClose process address
CRampartDoc::OnNewDocument
    [2]<C:\Program Files\SonicWALL\SonicWALL Global VPN Client\default.rcf>:  File exist
VerifyConfigFileHeader(): configuration tag not seen
CRampartDoc::OnSaveDocument
CryptAcquireContext(0x00000000):  Failed:  0x80090016
CryptAcquireContext(0x00000008):  Failed:  0x80090016
CryptAcquireContext(0x00000000):  Failed:  0x80090016
CryptAcquireContext(0x00000008):  Failed:  0x80090016
EncryptData()...
EncryptData() Invalid parameter
MonitorIPThread(): kill event seen - exiting normally.


The "VerifyConfigFileHeader(): configuration tag not seen" message sounds like there's a problem with my configuration file...
Avatar of djsix

ASKER

digitap:  I'm not sure I'm following you - I'm not even able to make it to a point where I get a GUI - the SonicWALL GVC client fails to start up and all I get is an error dialog...
Avatar of djsix

ASKER

And:

1) I do not have any anti-virus on this machine here.  Neither did I had any during the install.
2) Yes I have admin rights.
3) I do not have any original "default.rcf" file.  The one I was provided with doesn't work, and I've created one for myself using the sample one from the link I pasted above - looks like XML.
Avatar of djsix

ASKER

I will try to speak again with our IT department tomorrow, double check my RCF file.  I am starting to suspect that the one I have is incorrect - it doesn't have an XML shape like the sample one from the sonicwall documentation has.

More coming tomorrow...
OK...I'll wait.  We can speculate all we want, but garbage in; garbage out, right?  If the RCF is invalid then there's nothing we can do.
Avatar of djsix

ASKER

Ok - still no luck.  I tried with the official and proper .RCF file from our IT department.  I am still getting the same error prompt on startup.

This is what I tried again::

1) Name the file "default.rcf" and put it in C:\Program Files\SonicWALL\SonicWALL Global VPN Client\default.rcf"
2) Put it in "C:\Documents and Settings\NumberSIX\Application Data\SonicWALL\SonicWALL Global VPN Client\SonicWALL Global VPN Client.rcf"

The gvc_trace.txt file says this:

Loaded IPHLPAPI.DLL - Will use when appropriate
Failed to get the GetAdaptersAddresses process address
Warning: Failed to get the SnmpExtensionQueryEx process address
Warning: Failed to get the SnmpExtensionClose process address
CRampartDoc::OnNewDocument
    [2]<C:\Program Files\SonicWALL\SonicWALL Global VPN Client\default.rcf>:  File exist
VerifyConfigFileHeader(): xml header string not seen
CRampartDoc::OnSaveDocument
CryptAcquireContext(0x00000000):  Failed:  0x80090016
CryptAcquireContext(0x00000008):  Failed:  0x80090016
CryptAcquireContext(0x00000000):  Failed:  0x80090016
CryptAcquireContext(0x00000008):  Failed:  0x80090016
EncryptData()...
EncryptData() Invalid parameter
MonitorIPThread(): kill event seen - exiting normally.


Sounds like something is failing when that encryption process is attempted.  I can't figure out why.
Avatar of djsix

ASKER

Here is the config file I just tried - with sensitive information censored of course:

<?xml version="1.0" standalone="yes"?>

<SW_Client_Policy version="9.1">

    <Connections>

        <Connection name="vpn.[----DNSDOMAINNAME----].com" version="0000000000000000000000000000000000000000">

            <Flags>

                <UseDHCP>0</UseDHCP>

                <TrafficRestrictions>2</TrafficRestrictions>

                <MatchSecurity>0</MatchSecurity>

                <SetAsDefaultRoute>0</SetAsDefaultRoute>

                <WiFiSecEnforced>0</WiFiSecEnforced>

                <AllowCache>1</AllowCache>

                <EncryptCache>0</EncryptCache>

                <CacheXauth>1</CacheXauth>

                <AutoConnect>0</AutoConnect>

                <ForceIsakmp>1</ForceIsakmp>

                <ReEnableOnWake>0</ReEnableOnWake>

                <ReconnectOnError>1</ReconnectOnError>

                <ExecuteLogonScript>0</ExecuteLogonScript>

                <RunCommandOnConnect>0</RunCommandOnConnect>

                <RunCommand />

            </Flags>

            <Description />

            <Peer>

                <HostName>vpn.[----DNSDOMAINNAME----].com</HostName>

                <UseDefaultGWAsPeerIP>0</UseDefaultGWAsPeerIP>

                <EnableDeadPeerDetection>1</EnableDeadPeerDetection>

                <ForceNATTraversal>0</ForceNATTraversal>

                <DisableNATTraversal>0</DisableNATTraversal>

                <NextHop>0.0.0.0</NextHop>

                <Timeout>3</Timeout>

                <Retries>3</Retries>

                <InterfaceSelection>0</InterfaceSelection>

                <DialupUseMicrosoftDUN>1</DialupUseMicrosoftDUN>

                <DialupApp />

                <DialupLeaveConnected>0</DialupLeaveConnected>

                <DPDInterval>5</DPDInterval>

                <DPDAttempts>5</DPDAttempts>

                <DPDAlwaysSend>0</DPDAlwaysSend>

            </Peer>

            <Phase1Params>

                <ExchangeType>4</ExchangeType>

                <AuthenticationMethod>1</AuthenticationMethod>

                <PresharedKey>[----CENSORED----]</PresharedKey>

                <Certificate />

                <DHGroupType>1</DHGroupType>

                <DHGroupValue>2</DHGroupValue>

                <DHLimitExp>0</DHLimitExp>

                <EncryptionAlgorithm>1</EncryptionAlgorithm>

                <EncryptAlgoKeyLen>0</EncryptAlgoKeyLen>

                <HashAlgorithm>2</HashAlgorithm>

                <Lifetime>1:28800</Lifetime>

                <IDType>11</IDType>

                <IDData>[----CENSORED----]</IDData>

                <SendXAuthVendorID>1</SendXAuthVendorID>

                <SendKeepAliveVendorID>1</SendKeepAliveVendorID>

                <SendProvisioningVendorID>1</SendProvisioningVendorID>

                <SendDHCPRelayVendorID>1</SendDHCPRelayVendorID>

                <ProposalAlgorithms>[----CENSORED----]</ProposalAlgorithms>

            </Phase1Params>

            <UserAuthentication>

                <Expected>0</Expected>

            </UserAuthentication>

            <Phase2Params>

                <ProtocolID>3</ProtocolID>

                <EncapsulationMode>1</EncapsulationMode>

                <ESPTransform>3:1:0:0:32</ESPTransform>

                <Lifetime>1:900</Lifetime>

                <DHGroupType>1</DHGroupType>

                <DHGroupValue>0</DHGroupValue>

                <DHLimitExp>0</DHLimitExp>

            </Phase2Params>

            <PersonalFirewall>

                <RequirePFW>0</RequirePFW>

                <LANPrimaryIP>0.0.0.0</LANPrimaryIP>

            </PersonalFirewall>

        </Connection>

    </Connections>

</SW_Client_Policy>
How do they send you the rcf?  Do they send it via email?  I've seen rcf files sent via email corrupted.  Also, you might ask them if they'd consider configuring users to login via RADIUS such that you wouldn't need an rcf file.
What's the oldest global vpn client that you can download?
Avatar of djsix

ASKER

1) Today I noticed that the RCF file they had given me was in Unicode format, I thought that possibly the Global VPN Client wouldn't like that so I saved it in UTF-8 format.  No changes, still get the error prompt.  That could have been it, but still no luck.  This Global VPN Client is very stubborn with this failing encryption thing.  I believe we are not affecting the cause still.

2) I doubt I can convince the entire IT department to change the way they configure all their users only because I am the only one using Win2000 SP4 to work remotely and it doesn't work for me.

3) The Global VPN Client I've tried so far is the previous version from the current one, I thought I'd try the second most recent one since the most recent one didn't work, and didn't want to go too far back in case there would be more bugs.  I can try to download an other version as my next step though.
Avatar of djsix

ASKER

I'm having a look at the oldest Global VPN Client I can download now:
1.0.0.0 from 2003.  Release notes says it supports Windows 2000.  Will let you know of this outcome...
Avatar of djsix

ASKER

I am really out of luck uninstalling the current Global VPN Client I have (4.0.0.842), see the attached image.

I am tempted to remove all SonicWALL directories myself under C:\Program Files and C:\Documents and Settings and hunt the registry to destroy anything related to "SonicWALL" before I try the next install of an older client.

Do you have a better way out of this?

sonicwall-uninstall-error.jpg
ok...will wait for your response.
Avatar of djsix

ASKER

The solution described in that link is for a different error message that I am not getting.

I could still try the cleanup operation though...
Avatar of djsix

ASKER

No luck there either.  Getting an error about a missing gdiplus.dll file.

I think I'll try to manually cleanup this install tonight.  Then try to reinstall the older client.

gvcutil-cleanup-error.jpg
ok...sorry.  that windows 2000 OS just wasn't expected to be around any longer.
Avatar of djsix

ASKER

Yeah... eventually I could have time/resources to upgrade that machine, but it's used on a weekly basis so I am stuck for a while.

IT guys at work reproduced my issue, and found out that the previous installer would work for them.  Within a few days I'll retry the uninstall (or most likely a manual wipe followed by another install of the older client)...

WIll keep you posted...
OK...sorry you're having so much trouble with it.
Avatar of djsix

ASKER

So today I manually removed SonicWALL GVC 4.0.0.842 by deleting the files manually and destroying as much items named "SonicWALL" as I could in the registry.

I apparently succeeded as SonicWALL disappeared from the "Add/Remove programs" menu, and when I tried to install the new software, it told me "it seems you've uninstalled SonicWALL GVC, please reboot".

So I rebooted and cleanly installed client 4.0.0.835.

But still no change - same error message about failing to encrypt the configuration file.
There's got to be something wrong with my system.

As my IT department suggested (this version of the client worked for them on a ghost of Win2000), there's would only be one thing left to do (before switching OSes I guess) and it would be to open a support ticket with SonicWALL...
Yes, that's probably the next step.  If there IS something wrong with your system, the a re-image is probably the next step if support falls through.
Avatar of djsix

ASKER

I just realized that my IT department had actually tried 4.0.0.830, not 4.0.0.835.

So I get to try one more SonicWALL GVC before re-imaging or support...
Use the GVC cleanup tool to uninstall.  Should save you some time....although that might not be a real concern now....sigh.
Avatar of djsix

ASKER

Tried the .830 client - same result.  Checking how to open ticket with SonicWALL now.
You'll need to use the mysonicwall account that originally setup the sonicwall as they will ask for the serial number of your sonicwall appliance when you create a ticket via the mysonicwall website or call.
Avatar of djsix

ASKER

Ok!  Looks like my IT department is a bit slow on this... as they are the ones administering it.  I'm only one of many users.  I'll look into that...

So even though my problem is not fully answered I can accept your original solution to at least get past the initial error message, which got me a few steps further initially.  Before I forget :)
Avatar of djsix

ASKER

This solves the main error message I reported and gets a few steps further on Windows 2000 SP4, but does not solve the full problem.  This error message appears to be a symptom of a bigger problem not solved by this solution.
I can understand that, because for server clients, I AM the IT department.
and, thanks for the points!