Windows MSI: block MSI installation if System Encryption is enabled until we find a workaround for MSI service inability to access EFI environment variables (GetFirmwareEnvironmentVariable return empty values)

This commit is contained in:
Mounir IDRASSI 2021-09-02 00:10:43 +02:00
parent 7bc4256c42
commit ff3cbf5672
No known key found for this signature in database
GPG Key ID: 02C30AE90FAE4A6F
1 changed files with 6 additions and 0 deletions

View File

@ -1511,6 +1511,11 @@ BOOL DoDriverUnload_Dll (MSIHANDLE hInstaller, HWND hwnd)
BootEncryption bootEnc (hwnd);
if (bootEnc.GetDriverServiceStartType() == SERVICE_BOOT_START)
{
MSILogAndShow(hInstaller, MSI_ERROR_LEVEL, L"VeraCrypt MSI installation is currently not compatible with Windows System Encryption");
bOK = FALSE;
goto end;
/************* TODO: find a workaround to the fact that MSI service cannot access EFI environment variable
try
{
// Check hidden OS update consistency
@ -1554,6 +1559,7 @@ BOOL DoDriverUnload_Dll (MSIHANDLE hInstaller, HWND hwnd)
SystemEncryptionUpdate = TRUE;
PortableMode = FALSE;
}
*****************************************/
}
}
catch (...) { }