Dear Customers,
Our current “Sentinel System Driver 7.5.9” and “Sentinel Protection Installer 7.6.8” do not support Windows 10 Professional with “Device Guard” enabled and Windows 2016 Server with “Device Guard” enabled.
Both “Sentinel System Driver 7.5.9” and “Sentinel Protection Installer 7.6.8” installation do complete successfully even if “Device Guard” is running. But when connecting your Sentinel Legacy key (SuperPro, UltraPro, SHK, and DUAL SHK) or Sentinel HL in SuperPro configuration, the plug & play driver’s “sntlusb64.sys” will fail to load.
In device Manager, you will notice a “warning” icon on the “SafeNet USB SuperPro/UltraPro” or “Sentinel Hardware keys” device.
If you check the properties and Device status, you will see:
Windows cannot load the device driver for this hardware. This driver may be corrupted or missing (code 39)
The problem is not simply due to the SafeNet Inc. certificate dates.
Support of “Device Guard” will require code change in the plug & play USB device driver, WHQL testing, functional test of new drivers.
In order to check if “Device Guard” is running on your customer machine, ask your customer for a ".NFO" file or Run “msinfo32.exe” and scroll down in the “system Summary”.
You will see “Device Guard Virtualization based security” -> Running
For now, you will have to disable “Device Guard” in the Group policy or disable “Virtualisation technology” (Intel VT-x) in the machine bios. (See Disabling Device-CredentialGuard.pdf ) in order for the Sentinel USB drivers to load.
The Gemalto engineering team, will release an updated “Sentinel System Driver” that will support “Device Guard” by end of Q3 2017.
Regards,
Olivier