Windows10-CustomKernelSigners icon indicating copy to clipboard operation
Windows10-CustomKernelSigners copied to clipboard

Not working on new windows

Open martinmclauren opened this issue 5 years ago • 3 comments

Hi,

Lately I have upgraded to the new version of windows (Windows 10 2004 enterprise) and after trying to run this, windows got into a this weird boot loop.

After being able to get out of the loop i tried to figure out what was the problem,and after looking around for a while i found that on windows 10 2004 there is simply no CodeIntegrity-AllowConfigurablePolicy policy and that the program throws an exception on Policy[L"CodeIntegrity-AllowConfigurablePolicy"].GetData<PolicyValue::TypeOfUInt32>() = 1; and exits before it is able to clean itself from the startup cmdLine - making it restart over and over and getting an exception over and over

So I tried playing around with it and found that if i do add the policy using this code's API the program does not enter a boot loop any more but then it fails while trying to install the driver saying that it isnt signed

Note that this program worked perfectly fine on my last windows which was a Windows 10 1909 enterprise

Thanks in advance

martinmclauren avatar Aug 04 '20 11:08 martinmclauren

I tried this method today and I also have this same exact problem. Bootloop when running EnableCKS.exe. Any idea how to resolve this problem?

l1pz avatar Mar 28 '21 17:03 l1pz

Check out https://github.com/valinet/ssde, I have put together a new driver based on the one from here and what was provided in Geoff's article and it works just fine on Windows 11 22000.1. Also, I fixed EnableCKS (ssde_enable) so that it does not boot loop anymore by commenting the offending instruction from above.

valinet avatar Aug 27 '21 18:08 valinet

Thank you very much! I really appreciate your work!

On Fri, Aug 27, 2021 at 8:37 PM Valentin-Gabriel Radu < @.***> wrote:

Check out https://github.com/valinet/ssde, I have put together a new driver based on the one from here and what was provided in Geoff's article and it works just fine on Windows 11 22000.1. Also, I fixed EnableCKS (ssde_enable) so that it does not boot loop anymore by commenting the offending instruction from above.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/HyperSine/Windows10-CustomKernelSigners/issues/8#issuecomment-907397309, or unsubscribe https://github.com/notifications/unsubscribe-auth/AGGVF75BC57IZTFQB7P6M7LT67LO3ANCNFSM4PUKER3A . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

l1pz avatar Aug 27 '21 18:08 l1pz