After Deinstallation of UTIMACO Safeguard 5.40 Windows GINA Missing

---

Patrick-Juch wrote:

After i deinstalled the Utimaco Safeguard 5.40 on a Dell D620 i cant logon to windows anymore because the GINA.DLL is missing.

Any ideas how to fix it ?

---

Hi Patrick-Juch,

Thank you for posting your question in the SophoTalk Community forum. During the SGN/SGE 5.40 uninstallation process Sophos doesn't remove or modify the msgina.dll found in the \Windows\system32 folder. You can either run a Microsoft Windows system repair to fix your missing GINA or check your registry. Did you change your registry after SafeGuard was installed to alter the GINA chaining order? If so, you may need to undo those changes. Booting into a WinPE disc and running the regedit tool might be a good place to start.

Let us know how it works out!

You can usually get round any Safeguard Gina problems by connecting to the registry of the problem PC/Laptop remotely.

When it gets this far it's usually accessible over the network and you can therefore amend the registry to point to the MSGina.dll again or get onto the PC via the c$ share and rename the gina.dll  to the name of the gina that the machine is looking for.

HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\GinaDll Specifies which Gina is being used, if this specifies sggina.dll amend it to read msgina.dll

Also check out HKLM\SOFTWARE\Utimaco\Safeguard Enterprise\Authentication\OriginalGina if there are still remnants of Safeguard installed as this may reference a 3rd party gina that is no longer installed. Again you can amend this entry to read msgina.dll

I have the same issue tried uninstalling Sophos and now it is getting "Failed Logon - Safeguard Enterprise settings do not allow your logon". I also tried changing the registry to msgina.dll in HKLM\software\microsoft\software\windows NT\currentversion\winlogon\GinaDll to msgina.dll but it reverts back to sggina.dll, after trying to sign on fails again.  The other registry HKLM\SOFTWARE\Utimaco\Safeguard Enterprise\Authentication\OriginalGina show msgina.dll.

I can map the drive c$ through the network and access the registry but I can not sign on to the machine...

Please help!

You'll need to generate an XML  file in the management centre that deactivates the Safeguard Gina repair.

Copy the XML file into "C:\Documents and Settings\All Users\Application Data\Utimaco\SafeGuard Enterprise\Import"
 then run the command c:\WINDOWS\system32\SGMCmdIntn.exe (I use Dameware utilities to run this .exe in a remote command window when I'm unable to log on to the problem laptop).

Once you've run it you can change the gina in the registry and Safeguard will leave it alone.

This was the KB article I followed

Product

SafeGuard Enterprise Device Encryption 5.2x

Client OS

Windows XP SP2 Professional Edition

Server OS

None

Question

After installing IBM Wireless software the system shows a unknown GINA message on startup: "

Unknown GINA: ‘‘‘‘IWPDGINA.DLL’’’’ should the Microsoft GINA (msgina.dll) be used instead?"

What needs to be done to solve this GINA conflict?

Answer

In order to solve this issue it is necessary to disable the GINA repair function of SafeGuard Enterprise

and after that to apply changes to the registry which will change the current GINA chain in the system.

Step 1. Disable the SafeGuard GINA chain repair

First of all, the "deactivate_ginachainrepair" XML-file (attached) has to be signed with the company

certificate.

SGN MC -> Tools -> Options -> Company Certificate

After browsing to this file just click "OK" and the MC will create a new

file which is called "deactivate_ginachainrepair_Signed".

This new file can now be copied into the Import folder in the LocalCache of the SGN Client.

C:\Documents and Settings\All Users\Application

Data\Utimaco\SafeGuard Enterprise\import

Now the tool "SGMcmdintn.exe" has to be run in the commandline (the XML-file should then disappear

from the import folder) .

The GINAchainrepair is now disabled and logon to Windows without any message is possible again.

Step 2. Change the registry to

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

"GinaDLL"="IWPDGina.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Utimaco\SafeGuard Enterprise\Authentication]

"OriginalGina"="MSGina.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\Wireless\cswSSO]

"OrgGinaDLL"="sggina.dll"

Hi man,

Please try to upgrade your Sophos SGN into v5.6 and let us know how you go here. I had the problem of infinite reboot after uninstalling Sophos SGN client v5.5 on my Windows XP SP3 using WinPE+SGNRollback.exe