The warning AFD 16001 is displayed in the Windows 8.x and Windows 2012 R2 event log when VMware tools is installed with the vShield Endpoint component
search cancel

The warning AFD 16001 is displayed in the Windows 8.x and Windows 2012 R2 event log when VMware tools is installed with the vShield Endpoint component

book

Article ID: 342016

calendar_today

Updated On:

Products

VMware NSX Networking

Issue/Introduction

Symptoms:
  • When VMware Tools is installed with the VMware vShield Endpoint component on a virtual machine with a Windows 8 or Windows Server 2012, you see entries in the event viewer logs similar to:

    Either the component that raises this event is not installed on your local computer or the installation is corrupt.
  • When VMware Tools is installed with the VMware vShield Endpoint component on a virtual machine with a Windows 8.1 or Windows Server 2012 R2, you see entries in the event viewer logs similar to:

    A TDI filter (\Driver\vnetflt) was detected. This filter has not been certified by Microsoft and may cause system instability.


Environment

VMware vCloud Networking and Security 5.1.x
VMware vCloud Networking and Security 5.5.x

Cause

This issue occurs when the vsepflt driver code is signed using a VMware digital certificate. The vnetflt.sys is a TDI fitler driver. There is no Microsoft signing available for TDI filter drivers.

Resolution

These warning messages are benign and can be safely ignored.