Yubico Forum
https://forum.yubico.com/

windows 10 1703 minidriver update breaks PIV
https://forum.yubico.com/viewtopic.php?f=26&t=2739
Page 3 of 4

Author:  Sas [ Thu Nov 09, 2017 2:06 pm ]
Post subject:  Re: windows 10 1703 minidriver update breaks PIV

mattlegitt wrote:
Please review the following forum post for more information.

viewtopic.php?f=25&t=2764

Unfortunately, pardon my language, this information is garbage. I cannot reasonably expect regular users, a lot of whom a blue collar workers, to follow these instructions, on top of that these instruction for preventing Minidriver from installing is not really functioning.

Yubico really need to do something about this, or a lot of customers will be forced to look for alternative solution. (Looks like my company will be one of them, as the amount of calls keep rising)

Author:  My1 [ Thu Nov 09, 2017 2:25 pm ]
Post subject:  Re: windows 10 1703 minidriver update breaks PIV

I totally agree but there is at least one thing to make this A LITTLE BIT less ugly.

If these computers are inside a domain, you can do the "don't update the damn driver anymore" setting via group policy, after all gpedit is nothing more than the group policy editor, and push that setting to all the pcs. The users would then only have to Uninstall the driver once, which is still ugly but hey, it's an improvement.

Author:  Sas [ Thu Nov 09, 2017 3:26 pm ]
Post subject:  Re: windows 10 1703 minidriver update breaks PIV

My1 wrote:
I totally agree but there is at least one thing to make this A LITTLE BIT less ugly.

If these computers are inside a domain, you can do the "don't update the damn driver anymore" setting via group policy, after all gpedit is nothing more than the group policy editor, and push that setting to all the pcs. The users would then only have to Uninstall the driver once, which is still ugly but hey, it's an improvement.

Yes, I've already done that, but still once in a while the driver manage to install itself even with this setting turned on.

Author:  My1 [ Thu Nov 09, 2017 4:01 pm ]
Post subject:  Re: windows 10 1703 minidriver update breaks PIV

Okay this is definitely not normal, this should go to ms support.

Author:  Sas [ Mon Nov 13, 2017 3:21 pm ]
Post subject:  Re: windows 10 1703 minidriver update breaks PIV

My1 wrote:
Okay this is definitely not normal, this should go to ms support.

Unfortunately MS pointing finger to vendor

Author:  My1 [ Mon Nov 13, 2017 3:52 pm ]
Post subject:  Re: windows 10 1703 minidriver update breaks PIV

Sas wrote:
My1 wrote:
Okay this is definitely not normal, this should go to ms support.

Unfortunately MS pointing finger to vendor

how is the vendor at fault when MS updates the driver even if the filter is set? from what I can see clearly MS didnt do the prevention mechanism properly.

Author:  Sas [ Mon Nov 13, 2017 4:15 pm ]
Post subject:  Re: windows 10 1703 minidriver update breaks PIV

My1 wrote:
Sas wrote:
My1 wrote:
Okay this is definitely not normal, this should go to ms support.

Unfortunately MS pointing finger to vendor

how is the vendor at fault when MS updates the driver even if the filter is set? from what I can see clearly MS didnt do the prevention mechanism properly.

No, with filter the device won't work at all.

Author:  My1 [ Mon Nov 13, 2017 4:17 pm ]
Post subject:  Re: windows 10 1703 minidriver update breaks PIV

Sas wrote:
My1 wrote:
Sas wrote:
Unfortunately MS pointing finger to vendor

how is the vendor at fault when MS updates the driver even if the filter is set? from what I can see clearly MS didnt do the prevention mechanism properly.

No, with filter the device won't work at all.

Oh that really sux, guess i have one more reason to stay from w10 for now.

Author:  Sas [ Thu Nov 16, 2017 9:06 pm ]
Post subject:  Re: windows 10 1703 minidriver update breaks PIV

Driver keep installing itself at random machines. Looking for any ideas how to block it.

Author:  oderbang [ Wed Dec 06, 2017 12:36 pm ]
Post subject:  Re: windows 10 1703 minidriver update breaks PIV

Hi I can also confirm this issue
Certificate are issued via the PIV manager or CSIS Enrollment Station

we recently had all the Yubikey replaced due to the weak crypto issue. (just 2 months ago) we have now started to see odd laptop remote user having this issue.
I can confirm uninstalling the mini driver from "Apps & features" and Device manager resolves the issue.

But as the driver is auto pushed (we are not blocking it) is there anyway to find out exactly what is wrong with the new driver/setup

Page 3 of 4 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/