VMware Tools installation fails with message: Setup failed to install EFI firmware update driver
search cancel

VMware Tools installation fails with message: Setup failed to install EFI firmware update driver

book

Article ID: 414486

calendar_today

Updated On:

Products

VMware vSphere ESXi

Issue/Introduction

  • While installing VMware tools on Windows Guest-OS, the following error message is observed and the installation fails.

Setup failed to install EFI firmware update driver automatically. This driver will have to be installed manually.

  • Same error is observed if the VMware Tools was uninstalled from the Guest-OS and while attempting to install it.
  • During the VMware Tools upgrade, the error is not observed.
  • vminst.log (location: C:\Users\%username%\AppData\Local\Temp\vminst.log) will contain the following similar log snippets: 

YYYY-MM-DDTHH:MM| tools-build-24915695| I1: DriverBaseInfo::ReadMultiszFromRegistry: No registry value vwdk.installers
YYYY-MM-DDTHH:MM| tools-build-24915695| I1: DriverBaseInfo::DeleteFromRegistry: No info for driver efifw to delete
YYYY-MM-DDTHH:MM| tools-build-24915695| I1: Util_GetKeyValueDWORD: Cannot query key value HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmwefifw\DeleteFlag| winerror code 2 (The system cannot find the file specified.)
YYYY-MM-DDTHH:MM| tools-build-24915695| I1: PnpDriverManager::InstallPnPDevices: Installing driver with INF: "C:\Program Files\Common Files\VMware\Drivers\efifw\Win8\efifw.inf", flags: 1
YYYY-MM-DDTHH:MM| tools-build-24915695| I1: PnpDriverManager::InstallPnPDevices: Inf file C:\Program Files\Common Files\VMware\Drivers\efifw\Win8\efifw.inf was installed as oem0.inf (full path C:\WINDOWS\INF\oem0.inf)
YYYY-MM-DDTHH:MM| tools-build-24915695| I1: PnpDriverManager::InstallPnPDevices: Attempting to install HID0: UEFI\RES_{c9cf6ed5-7195-4824-b60b-7acdc14b6c82}
YYYY-MM-DDTHH:MM| tools-build-24915695| I1: PnpDriverManager::InstallPnPDevices: UpdateDriverForPlugAndPlayDevicesW on ID0 (UEFI\RES_{c9cf6ed5-7195-4824-b60b-7acdc14b6c82}) failed| HRESULT code 0x800f0248 (The installation of this device is forbidden by system policy. Contact your system administrator.)
YYYY-MM-DDTHH:MM| tools-build-24915695| E1: PnpDriverManager::InstallPnPDevices: Failed to install efifw driver| winerror code 3758096968
YYYY-MM-DDTHH:MM| tools-build-24915695| I1: DriverInstallerInfo::SetMsiInstallerPresent: Set Msi installer: present
YYYY-MM-DDTHH:MM| tools-build-24915695| I0: MessageBox( 250264, "Setup failed to install EFI firmware update driver automatically.  This driver will have to be installed manually.", "VMware Tools Installation", 48)

  • setupapi.dev log (location: C:/windows/INF/setupapi.dev) contains log snippets the installation of the device (UEFI) is forbidden by system policy.

>>>  [Device Install (DiInstallDevice) - UEFI\RES_{C9CF6ED5-7195-4824-B60B-7ACDC14B6C82}\0]
>>>  Section start YYYY/MM/DD HH:MM:SS
      cmd: C:\Windows\System32\MsiExec.exe -Embedding AB4492B645FB88D15ED38A149EECE6F3 E Global\MSI0000
     ndv: Flags: 0x00000000
     dvi: Class GUID of device changed to: {f2e7dd72-6468-4e36-b6f1-6488f42c1b52}.
     sto: {Setup Import Driver Package: c:\windows\system32\drivers\osd\bymodel_vmware7,1\efifw\win8\efifw.inf} HH:MM:SS
     inf:      Provider: VMware, Inc.
     inf:      Class GUID: {f2e7dd72-6468-4e36-b6f1-6488f42c1b52}
     inf:      Driver Version: DD/MM/YYYY,1.0.0.0
     inf:      Catalog File: efifw.cat
     dvi: Class GUID of device changed to: {f2e7dd72-6468-4e36-b6f1-6488f42c1b52}.
     ump: {Plug and Play Service: Device Install for UEFI\RES_{C9CF6ED5-7195-4824-B60B-7ACDC14B6C82}\0}
     pol:      {Device installation policy check [UEFI\RES_{C9CF6ED5-7195-4824-B60B-7ACDC14B6C82}\0]} HH:MM:SS
!!!  pol:           The device is explicitly restricted by the following policy settings:
!!!  pol:           [-] Restricted installation of devices not described by policy
     pol:      {Device installation policy check [UEFI\RES_{C9CF6ED5-7195-4824-B60B-7ACDC14B6C82}\0] exit(0xe0000248)}
!!!  dvi:      Installation of device is blocked by policy. Error = 0xE0000248
     ump: {Plug and Play Service: Device Install exit(e0000248)}
!!!  ndv: Device install failed for device.
!!!  ndv: Error 0xe0000248: The installation of this device is forbidden by system policy. Contact your system administrator.
<<<  Section end YYYY/MM/DD HH:MM:SS
<<<  [Exit status: FAILURE(0xe0000248)]

Environment

  • ESXi 8.x
  • ESXi 9.x

Cause

  • Group policy or Microsoft Intune configuration policy can restrict new device installation, which may cause the VMware Tools installation to fail when it attempts to install the EFI firmware update driver.

Resolution

  • Allow the following Device IDs and Class IDs from the Device Installation Restrictions from Microsoft Intune Configuration policy or Group policy.

Device ID

Class ID

UEFI\RES_

{c9cf6ed5-7195-4824-b60b-7acdc14b6c82}

UEFI\CC_00010001

{f2e7dd72-6468-4e36-b6f1-6488f42c1b52}
  • Workaround:
    • If the virtual machine has Secure boot enabled, along with vTPM, the EFI Firmware updates directly at VM booting bypassing the device installation by Windows capsule update.
    • Enable Secure boot by following the KB: Enable or Disable UEFI Secure Boot for a Virtual Machine.
    • Power-on the virtual machine and proceed to install VMware tools.
Powered by Wolken Software