Yubico Forum

Re: windows 10 1703 minidriver update breaks PIV

2018-01-17T10:47:19+01:00

Hit by this as well.

Does anyone know the exact update name so I can un-approve it from WSUS?

I would prefer to not blacklist the device ID since some complained that the device did not work after that.

Does anyone know does OpenSC support the new "container" on-card format or will it be supported?

Statistics: Posted by maggis — Wed Jan 17, 2018 10:47 am

Re: windows 10 1703 minidriver update breaks PIV

2017-12-18T09:19:20+01:00

does that mean the smart card certs need to be regenerated/reinstalled on the yubikey?
Has anyone else tried this?

just removing the Minidriver seem to solve the issue, no need to roll back the driver from "Yubikey Smart Card" to generic PIV NIST driver

Statistics: Posted by irweazel — Mon Dec 18, 2017 9:19 am

Re: windows 10 1703 minidriver update breaks PIV

2017-12-06T12:41:06+01:00

oderbang wrote:

Hi I can also confirm this issue
Certificate are issued via the PIV manager or CSIS Enrollment Station

we recently had all the Yubikey replaced due to the weak crypto issue. (just 2 months ago) we have now started to see odd laptop remote user having this issue.
I can confirm uninstalling the mini driver from "Apps & features" and Device manager resolves the issue.

But as the driver is auto pushed (we are not blocking it) is there anyway to find out exactly what is wrong with the new driver/setup

as said in one announement post, The new Driver by Yubi uses a different format for the storage which doesnt rely on the original slots anymore, this removes cross-compatibility because the new system probably doesnt work everwhere, but also has benefits like using multiple certs of the same type and more certs in general.

although it would really have helped if the PIV Manager would have allowed to 1) store the certs in the new container format and 2) make the mappings towards the slots so you can select which certs out of that container can be also used as slots.

Statistics: Posted by My1 — Wed Dec 06, 2017 12:41 pm

Re: windows 10 1703 minidriver update breaks PIV

2017-12-06T12:36:34+01:00

Statistics: Posted by oderbang — Wed Dec 06, 2017 12:36 pm

Re: windows 10 1703 minidriver update breaks PIV

2017-11-16T21:06:42+01:00

Driver keep installing itself at random machines. Looking for any ideas how to block it.

Statistics: Posted by Sas — Thu Nov 16, 2017 9:06 pm

Re: windows 10 1703 minidriver update breaks PIV

2017-11-13T16:17:54+01:00

Sas wrote:

My1 wrote:

Sas wrote:

Unfortunately MS pointing finger to vendor

how is the vendor at fault when MS updates the driver even if the filter is set? from what I can see clearly MS didnt do the prevention mechanism properly.

No, with filter the device won't work at all.

Oh that really sux, guess i have one more reason to stay from w10 for now.

Statistics: Posted by My1 — Mon Nov 13, 2017 4:17 pm

Re: windows 10 1703 minidriver update breaks PIV

2017-11-13T16:15:28+01:00

My1 wrote:

Sas wrote:

My1 wrote:

Okay this is definitely not normal, this should go to ms support.

Unfortunately MS pointing finger to vendor

how is the vendor at fault when MS updates the driver even if the filter is set? from what I can see clearly MS didnt do the prevention mechanism properly.

No, with filter the device won't work at all.

Statistics: Posted by Sas — Mon Nov 13, 2017 4:15 pm

Re: windows 10 1703 minidriver update breaks PIV

2017-11-13T15:52:44+01:00

Sas wrote:

My1 wrote:

Okay this is definitely not normal, this should go to ms support.

Unfortunately MS pointing finger to vendor

how is the vendor at fault when MS updates the driver even if the filter is set? from what I can see clearly MS didnt do the prevention mechanism properly.

Statistics: Posted by My1 — Mon Nov 13, 2017 3:52 pm

Re: windows 10 1703 minidriver update breaks PIV

2017-11-13T15:21:23+01:00

My1 wrote:

Okay this is definitely not normal, this should go to ms support.

Unfortunately MS pointing finger to vendor

Statistics: Posted by Sas — Mon Nov 13, 2017 3:21 pm

Re: windows 10 1703 minidriver update breaks PIV

2017-11-09T16:01:14+01:00

Okay this is definitely not normal, this should go to ms support.

Statistics: Posted by My1 — Thu Nov 09, 2017 4:01 pm

Re: windows 10 1703 minidriver update breaks PIV

2017-11-09T15:26:37+01:00

My1 wrote:

I totally agree but there is at least one thing to make this A LITTLE BIT less ugly.

If these computers are inside a domain, you can do the "don't update the damn driver anymore" setting via group policy, after all gpedit is nothing more than the group policy editor, and push that setting to all the pcs. The users would then only have to Uninstall the driver once, which is still ugly but hey, it's an improvement.

Yes, I've already done that, but still once in a while the driver manage to install itself even with this setting turned on.

Statistics: Posted by Sas — Thu Nov 09, 2017 3:26 pm

Re: windows 10 1703 minidriver update breaks PIV

2017-11-09T14:25:14+01:00

Statistics: Posted by My1 — Thu Nov 09, 2017 2:25 pm

Re: windows 10 1703 minidriver update breaks PIV

2017-11-09T14:06:47+01:00

mattlegitt wrote:

Please review the following forum post for more information.

viewtopic.php?f=25&t=2764

Unfortunately, pardon my language, this information is garbage. I cannot reasonably expect regular users, a lot of whom a blue collar workers, to follow these instructions, on top of that these instruction for preventing Minidriver from installing is not really functioning.

Yubico really need to do something about this, or a lot of customers will be forced to look for alternative solution. (Looks like my company will be one of them, as the amount of calls keep rising)

Statistics: Posted by Sas — Thu Nov 09, 2017 2:06 pm

Re: windows 10 1703 minidriver update breaks PIV

2017-11-08T19:47:14+01:00

Please review the following forum post for more information.

viewtopic.php?f=25&t=2764

Statistics: Posted by mattlegitt — Wed Nov 08, 2017 7:47 pm

Re: windows 10 1703 minidriver update breaks PIV

2017-11-08T16:19:24+01:00

The issue keeps haunting us. Driver keeps reinstalling on the Windows 10 machine spontaneously. Did anyone found reliable method of preventing this driver from self-installing?

Statistics: Posted by Sas — Wed Nov 08, 2017 4:19 pm