Lumension® KnowledgeBase

Article Number:
1688

Date Created:
06/12/2014

Last Updated:
02/04/2017

Article Type:
Troubleshooting

"Failed to install the hcmon driver" error when installing VMWare View or VMWare Workstation Client on a client machine running LES 4.5 or higher

Description

Product:

Endpoint Security

Versions:

Lumension Endpoint Security 4.5+

Summary:

LES blocks the VMWare driver HCMON driver due to security issues, causing the install of the VMWare Client to fail. You can disable the HCMON blocking functionality to complete the install.

Details

ISSUE

By default, LES blocks the VMWare driver “hcmon” because it disconnects USB devices from the host machine and connects them to Virtual Machines. It does this in a manner that enables the Virtual Machine to bypass the protection provided by LES.

The same error occurs when VMWARE attempts to install the HCMON driver on a non-LES endpoint running SADEC.

SOLUTION

Disable the “hcmon” blocking functionality by creating a registry value (DWORD type, Data 1) in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SK\Parameters with the name EnableHCMON.

WARNING: Use this solution at your own discretion as it exposes a security vulnerability.

The recommended procedure to successfully install the VMware Client:

  1. Enable HCMON by creating a EnableHCMON registry value (DWORD type, Data 1) in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SK\Parameters.

  2. Reboot the endpoint.

  3. Install VMWare View Client.

  4. Disable HCMON by removing the EnableHCMON registry value.

  5. Reboot the endpoint again.

12345678910
Current rating: 3