Summary

This Knowledgebase article provides information about the context and how to solve one of the Interceptor errors when trying to start Neverfail Engine replication.

More Information

Symptom

Fresh install or upgrade of Neverfail Engine on a Windows Server 2008 R2 will give the following error message when trying to start replication:

Failed to execute plan: com.neverfail.controller.ControlException: Error starting Interceptor

Caused by: com.neverfail.interceptor.GenericDriverException: DRIVER ERROR: Driver.load failed: Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. :[577][0X241]

Cause 

The Engine Interceptor driver was signed using a SHA2 algorithm and Windows Server 2008 R2 is laking the ability to read SHA2 signed drivers if the mentioned MS Patch has not been applied https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2015/3033929 

Usually this happens on systems that has not been patched after March 10, 2015.

Resolution  

Customers who have Windows automatic updates enabled and configured to check online for updates from Microsoft Update typically will not need to take any action because this security update will be downloaded and installed automatically. Customers who have not enabled automatic updating need to check for updates and install this update manually. For information about specific configuration options in automatic updating, see Microsoft Knowledge Base Article 294871.

For customers who install updates manually (including customers who have not enabled automatic updating), Microsoft recommends applying the update at the earliest opportunity using update management software, or by checking for updates using the Microsoft Update service. 

Applies To

Neverfail Engine installed on Windows Server 2008 R2.