Changing The Universal Driver 4.7.x Folder Location (Deployment) [Revelation On-Line Wiki]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Changing The Universal Driver 4.7.x Folder Location (Deployment) ======

==== Created at 24 SEP 2020 09:03AM ====



Given reports of a Windows exploit having to do with services using [[https://medium.com/@SumitVerma101/windows-privilege-escalation-part-1-unquoted-service-path-c7a011a8d8ae|unquoted file paths that include spaces]], there have been a number of customers who wish to change the location of their Universal Driver server(installed by default into the C:\REVSOFT\UNIVERSAL DRIVER folder).   It should be noted, though, that the Universal Driver service does NOT suffer from this vulnerability, which only affects_unquoted_ paths with spaces.  However, should you still wish to relocate your Universal Driver for this (or any other) reason, you may need to follow some additional steps. When you move your Universal Driver to a folder without a space, a UD 4.7.x bug causes it to load its settings from a registry subkey matching the specific serial number of the UD.  If the UD does not find this subkey it will default to named pipe only mode (error messages FS3102 and FS231 are symptoms of this condition). Therefore, you must follow the below steps to resolve the problem.

{{kb1088_1.jpg}}

===== Step 1: Stop the Existing Service =====

On the system where the Universal Driver service is installed, open up an "administrator" DOS CMD prompt.  To do this, you can "Search" for DOS, and then when the DOS CMD option is displayed, choose "Run as administrator":

{{kb1088_2.jpg}}

 

"CD" to your Universal Driver, and type in the following:

LH47SRVC REMOVE

{{kb1088_3.jpg}}

This will both stop, and remove, the service.

 

===== Step 2: Move the Existing Folder =====

Make sure to "CD" your DOS CMD prompt to some other location (for example, CD C:\) but DO NOT close it.

Next, rename the folder to the new desired name (for example, C:\REVSOFT\UD47)

 

===== Step 3: Initial Startup of the Universal Driver =====

In your still-open DOS CMD prompt, CD to your new location (for example, CD C:\REVSOFT\UD47).  Next type in the following:

LH47SRVC INSTALL

{{kb1088_4.jpg}}

This will both install, and start, the service.

Next, type:

LH47SRVC STOP

{{kb1088_5.jpg}}

This will stop the service.

 

===== Step 4: Configure Universal Driver Settings =====

 To work around the issue mentioned at the top of this article,  you must copy the relevant settings from the default registry location into the serial-number-specific subtree.

Start up the Registry Editor (REGEDIT) and move to the Universal Driver settings, located a tHKEY_LOCAL_MACHINE\Software\Wow6432Node\Revelation Software\Universal Driver\4.7.  Note your settings for the TcpIpPort, AnonymousUserName, and NamedPortName (the default values are 777, ServiceLogOn,and NONE, respectively).

Next, move to the subkey that has the same name as your UD serial number - for example, if your serial number is NT1084625242040, there should be an (empty) subtree named NT1084625242040 located under HKEY_LOCAL_MACHINE\Software\Wow6432Node\RevelationSoftware\Universal Driver\4.7.

Right-click in the right-hand pane, and choose "New", and then "String Value", and type in TcpIpPort as the key name.  Then press RETURN to enter the value, and enter the port number you recorded above. Follow the same steps to create the string keys and values for  AnonymousUserName and NamedPortName.

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\RevSoft\RevelationUniversal Driver\4.7\ NT1084625242040

{{kb1088_6.jpg}}

 

If you have created Shares to use with the ShareName parameter then you must copy them to a shares subkey under the serial number subkey as well.

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\RevSoft\RevelationUniversal Driver\4.7\ NT1084625242040\Shares

{{kb1088_7.jpg}}

 

 

===== Step 5: Restart the Universal Driver =====

In the DOS CMD box that's opened in your (new) Universal Driver folder, you can now type the following command:

LH47SRVC START

{{kb1088_8.jpg}}

 

This will start up the service, with the new registry values.

You can then type EXIT to close the DOS CMD prompt, and test your connectivity by starting up your OpenInsight.