wimfltr.sys expired certificate - causing install failure
I am trying to do an unattended/silent upgrade of v6.5 clients to v7.1 (and then patch 126.96.36.199).
During the installation of v7.1, Windows (Server 2003 x86 SP2) is prompting me to install the driver wimfltr.sys. This prompt is only seen if I log in locally, or using the /console session.
I am unsure why this is happening. I have seen: http://www.symantec.com/docs/TECH177388 which says that the error can be ignored. In my case, it can't as the installation never completes until a human logs in and clicks the OK button. The group policy is set for:
Devices: Unsigned driver installation behavior = Silenty succeed.
The registry key at HKLM\SOFTWARE\Microsoft\Driver Signing\Policy, is set to value 00.
This only seems to happen on *some* servers, not all of them. Today, two failed this way, and one succeeded. All were running client 6.5.3 on Windows 2003 Enterprise x86 SP2.
On the servers that experienced this issue, I also noticed (in the console session, nowhere else) warnings that processes such as bpbkar32, bpinetd, winlogon and csrss had "NetBackup dlls loaded which need to be replaced". I've seen that http://www.symantec.com/docs/TECH56389 appears to explain the cause of this, but it doesn't apply to client 7.1.
I'm not sure if that's related to the WimFltr.sys issue, or not.
Is there a workaround for the wimfltr issue? I can't find a download for Windows 2003 from MS that would install it. The TECH177388 page says that "Symantec is in the process of working with Microsoft to either obtain an updated WimFltr.sys driver file with an updated Digital Signature Certificate, or obtain an alternate valid driver file to replace 'WimFltr.sys'." - but that was last updated in December 2011.
Can anyone suggest how I might be able to get around this? The odd server here and there isn't too much a problem logon to a click a prompt on, but I have ~ 7,000 clients to update.