[Alpha Release] XCP-ng Windows PV tools 9.0.9065 Testsign released

dinhngtu

Hello all,

Version 9.0.9065 of the new Windows PV drivers has been released.

This release brings a security fix for XSA-468 (CVE-2025-27462, CVE-2025-27463, CVE-2025-27464) and clipboard support in our Rust Guest Agent.

This driver release is for testing purposes only and not for production use. It requires putting the system into testsign mode. (only applies to the drivers themselves, not XenBootFix/XenClean/mitigation scripts; you can use these tools separately without any configuration)

We are actively working with Microsoft to get the drivers signed (which is a slow process). An announcement will be made as soon as a Microsoft-signed build is available.

Download the release here: https://github.com/xcp-ng/win-pv-drivers/releases/tag/v9.0.9065

Release notes are below:

To download XenClean, click here. The ISO download also includes a copy of XenClean and XenBootFix. Remember to carefully read XenClean docs before use.

Before Installing

This driver release is for testing purposes only. Not for production use!
Not compatible with the "Manage Citrix PV drivers via Windows Update" option. You must disable this option before installing.
Make backups/snapshots before installing!
The drivers in this package are testsigned and require enabling testsigning mode. Disable Secure Boot, then run the included script testsign/install.ps1 as Administrator to configure Windows and install the necessary signer certificates. Your VM will reboot automatically.
Note: For this release only, extra files (mitigation scripts, testsign scripts) are not included in the ZIP (only in the ISO file). Find them in extras.zip.

Changes since 9.0.9030.0

IMPORTANT: Security fix for XSA-468 (CVE-2025-27462, CVE-2025-27463, CVE-2025-27464). Check the XCP-ng docs or blog announcement for more details.
- Mitigation and host-side detection scripts are included in the repository and release package.
NOTICE: Xen PV disk drivers have been reenabled by default on new installations. If you want to enable Xen PV disk drivers coming from 9.0.9030, you may do so from Add/Remove Programs.
NEW: Clipboard support in Rust Guest Agent.
Fixes: More improvements to XenClean to support older drivers.
Updated branding to follow Vates/XCP-ng brand guidelines.
Build automation support.

Changes since 8.2.2-beta

IMPORTANT: Security fix for XSA-468 (CVE-2025-27462, CVE-2025-27463, CVE-2025-27464). Check the XCP-ng docs or blog announcement for more details.
This release is based on upstream 9.1-series drivers, which includes the PV Mouse/Keyboard driver and PV Console Driver. You can access the PV console with the following command from a XCP-ng host:

xl console -t pv <vmname>

New installer with clean uninstallation and multiple install/uninstall safety checks.
New XenClean utility for cleanly removing XCP-ng and Citrix drivers.
Multiple driver stability fixes.
Volume Shadow Service Provider is no longer included. (XCP-ng 8.1 and newer no longer support quiescent snapshots)
Check out the new Rust-based Xen Guest Agent included in our package! We're looking to bring back even more features to the agent.
Older Windows versions are no longer supported. The driver requires at a minimum Windows 10 1607 or Windows Server 2016.

Help / Community Support

If you encounter installation/uninstallation errors, please try again with one of the following commands:

For installing:
msiexec.exe /i XenDrivers-x64.msi /l*vx install.log

For uninstalling:
msiexec.exe /x XenDrivers-x64.msi /l*vx uninstall.log

Please include this log along with the file C:\Windows\INF\setupapi.dev.log in your bug report. These files will help us troubleshoot any installation issues.

Additionally, please report any errors or BSOD you encounter during testing of this release. Your feedback is very appreciated.

Discussion: https://xcp-ng.org/forum (preferred)
Issue Tracker: https://github.com/xcp-ng/xcp/issues
IRC: #xcp-ng and #xcp-ng-dev on irc.freenode.net

Full Changelog: https://github.com/xcp-ng/win-pv-drivers/compare/v9.0.9030...v9.0.9065