2016 Digitally Signed Driver Issue

[NestedIT]

Has anyone run into this issue? This is a fresh installation of 2016 and Connect
Capture crop.jpg

[Lance]

SCENARIO
When installing Connect PBX software on a Generation 2 VM hosted on Hyper-V with secure boot enabled the installation highlights an issue with the TDIMEDIA.SYS driver.

Subsequently, after the installation has completed and the server is rebooted, the Connect Services fail to start.


SYMPTOMS
During installation, the following error message appears:

A digitially signed driver is required

Shoreware Media Driver
ShoreTel Inc

Windows blocked the installation of a digitally unsigned driver. Uninstall the program or device that uses the driver and check the publishers website for a digitally unsigned version of the driver.

Upon rebooting the server,you are unable to launch Director due to the following error:
- Shoreware telephony software
- Shoreware voicemail message
- Shoreware voicemail port
- Shoreware workgroup server
- ShoreTel vmemsync
- ShoreTel TrunkTestService
- Shoreware CSIS VMserver



RESOLUTION
To resolve the issue after the installation is complete and the services fail to start, perform the following steps: DISABLE DIGITAL SIGNATURE ENFORCEMENT IN WINDOWS 2016

Note: Disable Secure Boot if running HyperV (do this in the Virtual Machine settings > Firmware from HyperV admin console)

1. From Windows 2016 Server, Run DOS in ADMIN mode:
2. cd <drive>:\Windwows\system32\
3. type bcdedit.exe /set nointegritychecks on
4. reboot server