Cisco VPN on Windows 8 incl. making it work with 3G

Introduction

Cisco VPN on Windows 8 incl. making it work with 3G.  

My main goal was to make Cisco VPN work on a Windows 8 tablet. We have an HP 900 g1 and a Lenovo Thinkpad Tablet 2. Had to make this work with 3g as well.

I have no idea if this works with any of the none-atom processor tablets.

I don't know if this works with 64 bit Windows.

Background

I had to try so many different things in any kind of order which took up a lot of my time and I think you other people out there shouldn't have to do the same thing. Also it was other peoples' answers that helped me solved my problems so it's only fair.

Using the code

In many situations, not all of the changes I write are necessary to make it work. For instance, there are some of the changes regarding 3G which you don't have to do if you just use wifi or cable. I'll try to make sure that you know what every single change is regarding.

1. Download the VPN client from here http://www.asc.edu/downloads/ciscoVPN/Windows/
   • On our HP I used 5.0.07.0290
   • On the Lenovo I used 5.0.07.0410 which is the one in the link. I changed to the newer version because I thought maybe that could be the reason why I couldn't make it work on the Lenovo after I did the same as on the HP.
2. Download the fix Windows program from Citrix: ftp://files.citrix.com/winfix.exe (This shouldn't be necessary if you don't use 3g.)
3. Download dneupdate.msi for 32 bit: ftp://ftpsupport.citrix.com/dneupdate.msi (This shouldn't be necessary if you don't use 3G.)

Now that you've got all the files needed to do the trick, let's get going. (Of course the first two parts aren't needed if you also didn't have to download them)

1. Run the fix Windows program and follow the instructions. Restart afterwards (part of the instructions btw)
2. Run the dneupdate.msi. Restart afterwards (you will be prompted)
3. On my HP I didn't have to do this step and it was the only (and VERY annoying) thing different from making it work on the Lenovo. I got the following error in the Cisco client when trying to connect: 440 Driver Failure. This happened because windows 8 didn't accept the driver. To fix this you have to enter BIOS. If windows is not preinstalled, enter BIOS the normal way at restart. If Windows 8 IS preinstalled you'll have to do it the following way (The thing we have to do is disabling the driver signature enforcement. Before we can do that, we need to enter BIOS do turn off secure boot, but it might not be necessary. It was for me...): 

   To enter BIOS on a preinstalled w8, do the following:

   Enter settings by using the sidebar to the right -> Select change pc-settings at the bottom -> Select Generel -> select Restart now at the bottom -> Troubleshoot -> Advanced Options ->

   In BIOS

   The following only works one or 2 times before you have to do it again...
   Statup Settings -> Restart -> Pick option 7 (Deactivate forced driver signature) or something like that.

   Instead we have to do all the following

   UIEFI Firmware Settings -> Restart -> Goto security -> Secure Boot -> Disable Secure Boot -> F10 (Save and exit)

   After this boot

   In Windows, open command prompt as an administrator

   Run the following to disable DEP: bcdedit.exe/set {current} nx alwaysOff
   That might not work, try without {current}

   Run: bcdedit -set loadoptions ENABLE_INTERGRITY_CHECKS

   Run: bcdedit -set TESTSIGNING ON

   This should prevent the error forever and ever and ever and e...! 

4. Install the VPN client. It's a good idea to run the install-file locally. Also an error can occur under install either way. Just restart and hope it doesn't happen again. It worked for me.
5. (This step may not be necessary. Try and see if it works before doing this step.)
   Another error which happened on both tablets was error 442 failed to enable virtual adapter. To also prevent that error click windows button + r and write regedit and press enter. Goto HKEY_LOCAL_MACHINE -> SYSTEM -> CurrentControlSet -> Services -> CVirta. Open Displayname and remove everything but the last part: "Cisco Systems VPN Adapter"

Final words. Messing up this order could for example make you have to do step 3 again if u do step 1 after that because it will revert the driver enforcement. Just do it this way. Good luck!

Points of Interest

I noticed that this was the most annoying thing about this Windows tablet project.