Secure Boot and LibreDrive firmware

[Tazz5]

Hi,
I have an Asus BW16D1HT flashed to 3.10 mk. It works great with DVD, BluRay and UHD discs - when Secure Boot is disabled in the BIOS/UEFI. With Secure Boot enabled the drive is there but has the yellow caution mark in the device manager because "Windows cannot verify the digital signature for the drivers ... " Is this expected behaviour?

I'm still using Windows 10 x64 but due to some game updates Secure Boot is now required for the anti-cheat software to allow online multiplayer. I also test software that needs to boot into DOS to run so I have profiles saved in the BIOS/UEFI to make switching Secure Boot, CSM and other legacy booting options easier.

It's not a huge deal but is there a way to make the LibreDrive accessible with Secure Boot enabled so that I only need to reboot when I need to test the legacy software?

Thanks

[Billycar11]

i have not had any issues with secure boot enabled.
its likely since you had yours disabled and now enabled it the os does not like the signature of it for some reason in device manager just right click uninstall on the drive and then on top right click search for hw changes and see if it works

[Tazz5]

i have not had any issues with secure boot enabled.
its likely since you had yours disabled and now enabled it the os does not like the signature of it for some reason in device manager just right click uninstall on the drive and then on top right click search for hw changes and see if it works

Well, this motherboards (ASRock Z590 Pro4) secure boot implementation does not like flashed LibreDrives.

I tried uninstalling the drive with SB disabled then rebooting and turning SB on and letting device manager find it.
I tried flashing the drive to 3.01 then turning SB on.
I even tried replacing the Asus drive with a flashed WH16NS40 that I bought from Bluntman.

Whenever Secure Boot is enabled the drive is disabled.

Thanks for the suggestion, I never thought of doing that. I guess it's just going to be a minor inconvenience for me.

[keydb_helper]

Hi,
I have an Asus BW16D1HT flashed to 3.10 mk. It works great with DVD, BluRay and UHD discs - when Secure Boot is disabled in the BIOS/UEFI. With Secure Boot enabled the drive is there but has the yellow caution mark in the device manager because "Windows cannot verify the digital signature for the drivers ... " Is this expected behaviour?

You need to check which particular CD/DVD/Blu-ray drivers you have installed because that is not normal. LibreDrive itself is a firmware extension, not a driver, and it is independent of Secure Boot.

If you have previously installed a transparent decryption tool such as AnyDVD, XReveal etc it is more likely that the driver component of one of those tools is the culprit behind your Secure Boot problem.

This can be checked by opening up device manager and double clicking on your Asus drive. In the window which opens up, click on the 'Driver' tab and then click the 'Driver Details' button. This should show at least the Microsoft supplied and digitally signed 'cdrom.sys' driver but it is possible that other drivers will be shown as well. Please report back with this list as I am curious to know which driver is the problem.

It's not a huge deal but is there a way to make the LibreDrive accessible with Secure Boot enabled so that I only need to reboot when I need to test the legacy software?

Thanks

Just to be clear, I've never had any issues with LibreDrive and Secure Boot. This is across a combination of Windows 10, Windows 11, and Linux operating systems and both LG, Asus, and Pioneer branded drives.

[Tazz5]

If you have previously installed a transparent decryption tool such as AnyDVD, XReveal etc it is more likely that the driver component of one of those tools is the culprit behind your Secure Boot problem.

This can be checked by opening up device manager and double clicking on your Asus drive. In the window which opens up, click on the 'Driver' tab and then click the 'Driver Details' button. This should show at least the Microsoft supplied and digitally signed 'cdrom.sys' driver but it is possible that other drivers will be shown as well. Please report back with this list as I am curious to know which driver is the problem.

Just to be clear, I've never had any issues with LibreDrive and Secure Boot. This is across a combination of Windows 10, Windows 11, and Linux operating systems and both LG, Asus, and Pioneer branded drives.

The first thing I looked at was the driver and the one being used was the MS signed 'cdrom.sys'. I tried to update but "The best driver is already in use ..." That's what led me to think that it must be the firmware. Also, this morning, I tried an old Liteon cd-dvd drive that I have and that worked with SB enabled and added to my confusion.

After reading your comments I dug deeper into the drivers and found 'dvdfab.sys' being referenced under the MS driver and in the registry

Code: Select all

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E965-E325-11CE-BFC1-08002BE10318}

the "LowerFilters" value was "dvdfab". DVDFab was uninstalled long ago.

I renamed the .sys file and deleted the registry entry then uninstalled the drive from device manager. Rebooted and the drive is only using the MS driver and working correctly!

Thanks for the suggestion!

[keydb_helper]

After reading your comments I dug deeper into the drivers and found 'dvdfab.sys' being referenced under the MS driver and in the registry

Code: Select all

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E965-E325-11CE-BFC1-08002BE10318}

the "LowerFilters" value was "dvdfab". DVDFab was uninstalled long ago.

I renamed the .sys file and deleted the registry entry then uninstalled the drive from device manager. Rebooted and the drive is only using the MS driver and working correctly!

Thanks for the suggestion!

Thanks for the follow up, I'm glad to hear you were able to resolve the problem! If you encounter a similar issue again it might be easier to use ImgBurn to modify the upper/lower filters for your disc drive.