Terminal Server Agent on Windows Server 2008 R2 (service wont start)

[Matt.Blackwell]

Hi guys,

I have installed TSA 7.0.6-4. as administrator on windows server 2008 R2 with remote desktop services installed.

The TSA will not start (see screenshot)

These are the logs from the TSA file menu.

10/21/16 15:31:02[Info 427]: TSA: Install driver succeeds!
10/21/16 15:31:02[Info 519]: TSA: install service succeeds!
10/21/16 15:31:02[Info 331]: ------------Service is being started------------
10/21/16 15:31:02[Info 405]: Load debug log level Info .
10/21/16 15:31:02[Info 409]: Os version is 6.1.1.
10/21/16 15:31:02[Info 379]: System Port Range: 49152-65535.
10/21/16 15:31:02[Info 383]: System tcp timed wait delay(seconds): 240.
10/21/16 15:31:02[Info 283]: Service version is 7.0.6.4.
10/21/16 15:31:02[Info 287]: Installed driver version is 6.0.7.0.
10/21/16 15:31:02[Info 412]: Protocol version is 0x300.
10/21/16 15:31:02[Info 413]: Product version is 7.0.6-4.
10/21/16 15:31:02[Error 174]: Start driver service fails with error 577!!!!
10/21/16 15:31:02[Error 89]: Start driver fails with error 3!!!!
10/21/16 15:31:02[Error 430]: Start service fails due to start driver failure!!!!
10/21/16 15:31:02[Error 362]: Start error -1!!
10/21/16 15:31:02[Error 583]: Cannot open device: 2!!!!
10/21/16 15:31:02[Error 115]: Stop driver fails with error 1!!!!
10/21/16 15:31:02[Error 175]: Service stopped.

I orginally installed the latest TSA but to troubleshoot I downgraded.

Any assistance would be appreciated.

Thanks

Matt

[BPry]

error 577 would indicate that the signature on the driver itself is not correct, I have no idea what error 3 is. I would try to uninstall the agent as a whole and make sure everything actually removes; then try reinstalling and see if that fixes things. Make sure to redownload the agent incase your download is corrupt.

[Anon1 · Accepted solution]

Current versions of the agent are signed with a sha256 certificate. Windows 2008 R2 needs a patch installed in order to support sha256 code signatures.

https://technet.microsoft.com/en-us/library/security/2949927.aspx

[Matt.Blackwell]

 Hey Anon1,

Thanks for the solution...worked a treat!

Regards

Matt

[SERED-JFES]

Microsoft is announcing the reissuance of an update for all supported editions of Windows 7 and Windows Server 2008 R2 to add support for SHA-2 signing and verification functionality. This update supersedes the 2949927 update that was rescinded on October 17, 2014 to address issues that some customers experienced after installation. As with the original release, Windows 8, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows RT, and Windows RT 8.1 do not require this update because SHA-2 signing and verification functionality is already included in these operating systems. This update is not available for Windows Server 2003, Windows Vista, or Windows Server 2008.

https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2015/3033929