Unable to install on windows 11

syedire

Hi team,
I am trying to install Theopenem-Signed-1.6.0 on window 11 Enterprise. I see below errors while installtion:
Product: Theopenem -- Error 4101. Unable to create user account or group 'toemskeepalive' on the local machine. Error Code: 2245. The password does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirements.

My laptop has strong password policy which I cannot override, so could not proceed as during installation the 'toemsadmin' password does not match the policy requirements.
I also tried this, created user id:-toemskeepalive and a strong password, restarted laptop and restart the installation and I see a below error:
Product: Theopenem -- Error 4106. An error was encountered while creating a scheduled task: 'Toems-API Keepalive.job'. Error description: The user name or password is incorrect."

The password set is different from installer default. Laptop does not allow to create toemsadmin (password policy violate).

Can you please help us with this issue or share an installer which we can create a password. ?

Thank you.
Regards,
Sandeep

dbenitez

Disclaimer: I am not TheOpenEm Admin so take everything I say with a grain of salt.
This one is a little tricky.
The whole password process is governed by a public property KEEPALIVE_PASSWORD and custom action SetKeepalivePassword compiled in PasswordGenCustomAction.CA.dll in the TOEMS-MSI repo.
I took a closer look at the installer’s PasswordGenCustomAction.CA.dll and extracted the embedded managed assembly that contains SetKeepalivePassword. The custom action does not check whether KEEPALIVE_PASSWORD already has a value. It will always generate a new 10-character password using uppercase letters, lowercase letters, numbers, and a small set of special characters, then writes that value directly back to the MSI property. So, if the environment requires a password longer than 10 characters, the installer-generated password will always violate policy and account creation will fail with error 2245. It also explains why manually creating toemskeepalive does not fully solve the problem because the scheduled task is later created using the newly generated MSI password rather than the password used when the account was created manually. An MST that asserts the KEEPALIVE_PASSWORD property and disables the SetKeepalivePassword ControlEvent so the custom action cannot overwrite the compliant password supplied by the transform could work. The transform should also add KEEPALIVE_PASSWORD to SecureCustomProperties and MsiHiddenProperties, and it should be stored securely because the password can be recovered from the MST.
This is a total hack and the real answer would be to allow the user to provide a password in the installer, but it might work as a workaround in the meanwhile.

dbenitez

Links and snippets if you're curious:
Where SetKeepalivePassword is implemented:
https://github.com/jdolny/Toems-MSI/blob/main/Theopenem.aip line 301 and 406
<ROW Dialog_="VerifyReadyDlg" Control_="VerifyReadyDlgDialogInitializer" Event="DoAction" Argument="SetKeepalivePassword" Condition="1" Ordering="0"/>

<ROW Action="SetKeepalivePassword" Type="65" Source="PasswordGenCustomAction.CA.dll" Target="SetKeepalivePassword" WithoutSeq="true"/>

PasswordGenCustomAction.CA.DLL:
https://github.com/jdolny/Toems-MSI/blob/main/PasswordGenCustomAction.CA.dll

theopenem_admin

The installation doesn't let you continue even with the error? Seems that some people can and some can't not sure why. The keepalive isn't really even needed anymore, it will be removed in 2.0, if it ever gets done. I could try to a release a new installer soon, that just removes the keepalive.

syedire

Thank you for reply. Yes, I cannot continue even after the error occur. We will wait for the 2.0 installer release. Any likely date when it will be released?