• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4372
  • Last Modified:

SCCM PE Image Unsigned Driver Injection

Recently upgraded my SCCM 2007 R2 SP1 to SP2. Since doing so, whenever I try to add a unsigned driver to a boot image it fails with the following error.

   Error: Boot image to update:
      Microsoft Windows PE (x64)

   Error: Actions to perform:
      Add ConfigMgr binaries
      Disable Windows PE command line support
      Add drivers

   Success: Drivers that will be included:
      DELL CERC SATA 1.5/6ch RAID Controller

   Error: Failed to import the following drivers:
      DELL CERC SATA 1.5/6ch RAID Management Device - Failed to inject a ConfigMgr driver into the mounted WIM file

   Error: The wizard detected the following problems when updating the boot image.
      Failed to inject a ConfigMgr driver into the mounted WIM file
      Failed to inject a ConfigMgr driver into the mounted WIM file
      Failed to inject a ConfigMgr driver into the mounted WIM file
      Failed to inject a ConfigMgr driver into the mounted WIM file
      Failed to inject a ConfigMgr driver into the mounted WIM file
      The ConfigMgr Provider reported an error.: ConfigMgr Error Object:
      instance of SMS_ExtendedStatus
      {
            Description = "Failed to insert OSD binaries into the WIM file";
            ErrorCode = 2152205056;
            File = "e:\\nts_sms_fre\\sms\\siteserver\\sdk_provider\\smsprov\\sspbootimagepackage.cpp";
            Line = 4262;
            ObjectInfo = "CSspBootImagePackage::PreRefreshPkgSrcHook";
            Operation = "ExecMethod";
            ParameterInfo = "SMS_BootImagePackage.PackageID=\"MOH00027\"";
            ProviderName = "WinMgmt";
            StatusCode = 2147749889;
      };

This is just one of many drivers I am having this problem with. If I take this exact same driver, copied from the very place this process is using, and manually add it to the image using DISM with the /forceunsigned flag it works without a problem. After some digging there is a log file created by DISM during the image build using SCCM located at C:\Windows\Logs\DISM\dism.log. In this log I get the following error.

2010-11-12 12:47:38, Info                  DISM   DISM Driver Manager: PID=6024 Signature status of driver \\vsccm\Source\Drivers\Dell\PE\Dell-WinPE-Drivers-A02\winpe\x64\Storage\R129526\cercsr6.inf is: UNSIGNED - CDriverPackage::InitSignatureStatus
2010-11-12 12:47:38, Error                 DISM   DISM Driver Manager: PID=6024 Cannot install non-signed boot-critical drivers on amd64 images. Use /forceunsigned switch to override. \\vsccm\Source\Drivers\Dell\PE\Dell-WinPE-Drivers-A02\winpe\x64\Storage\R129526\cercsr6.inf - CDriverManager::CheckClientAddDriverScenarios(hr:0x80070032)
2010-11-12 12:47:38, Error                 DISM   DISM Driver Manager: PID=6024 d:\w7rtm\base\ntsetup\opktools\dism\providers\dmiprovider\dll\drivermanager.cpp:1063 - CDriverManager::Internal_DoAddDriverPackage(hr:0x80070032)
2010-11-12 12:47:38, Error                 DISM   DISM Driver Manager: PID=6024 d:\w7rtm\base\ntsetup\opktools\dism\providers\dmiprovider\dll\drivermanager.cpp:519 - CDriverManager::ExecuteCmdLine(hr:0x80070032)
20

Now all this is great because I finally know why the builds are failing. The problem I'm having now is... how do you get SCCM to use the /forceunsigned switch?
0
midwestexp
Asked:
midwestexp
  • 5
  • 4
  • 2
1 Solution
 
KezziCommented:
You specify that in the Task Sequence for the Driver Package installation.  I have attached a screen shot. Task Sequence screenshot of Driver Install
0
 
midwestexpAuthor Commented:
That's for the TS. What I am trying to do is load "unsigned" drivers into my PE boot image so that I can even get a TS to run. Which prior to SP2, worked without problem.
0
 
KezziCommented:
Not sure but i had issues during my upgrade.  Had to rerun sp2 after deleting my existing boot images so that they upgraded properly.  
0
Cloud Class® Course: Amazon Web Services - Basic

Are you thinking about creating an Amazon Web Services account for your business? Not sure where to start? In this course you’ll get an overview of the history of AWS and take a tour of their user interface.

 
JonLambertCommented:
Haven't come accross this before, but you could definately manually mount the source boot WIM and insert the drivers using DSIM usingt he forced unsigned switch, and then updated the boot wim pakcage (to force the WIM to be re-created).

If you do this, ensure that you do mount and update the source boot wim, and not the package boot wim which is generated by SCCM (which has the SCCM Packaged ID in the name).

0
 
midwestexpAuthor Commented:
Jon,

I finally broke down yesterday and resorted to manually inserting the drivers in to a custom image. I trust you have upgraded to SP2? Do you have any trouble injecting 64bit "boot-critical" drivers? I could provide a link to the Dell PE drivers I am using if anyone wants to give them a go on their setup?
0
 
JonLambertCommented:
I did a Boot WIM with Dell server MSD and NIC drivers last week, when I'm on site I'll get the namd and versions of the drivers I used, and we can see if they differ.
0
 
JonLambertCommented:
Attached is a jpg of some of the Dell drivers I attached  using the normal standard proccess. Maybe the driver version numbers can help you out

 Dell Boot Drivers Boot Drivers in WIM
0
 
midwestexpAuthor Commented:
I know one of the failing drivers I have is the same, other than version. It is the Dell CERC SATA 1.5/6ch RAID Controller as well as the management device. The version on mine is 4.1.1.7038. Which I got out of this cab file
 from Dell. On your sustem, is the driver you have for that signed?



0
 
JonLambertCommented:
Yes it is signed
0
 
JonLambertCommented:
From memory I might have utilised the Dell Server Deployment Pack add-in for the SCCM console to download the drivers, but I don't currently have that installed so I cant validate that was how I downloaded  the drivers.
0
 
midwestexpAuthor Commented:
Accepting based on effort. Issue has been submitted to Dell to correct.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: MCSA MCSE Windows Server 2012

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

  • 5
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now