If you suddenly can't print to your HP Printer from your Mac, you're not alone: Code security cert snafu blamed
(2020/10/23)
- Reference: 1603485752
- News link: https://www.theregister.co.uk/2020/10/23/hp_printer_macos/
- Source link:
Many Mac users today found, to their surprise, they are unable to print to their HP Inc printers nor use the Amazon Music desktop app.
It appears to be a code-signing snafu affecting macOS Catalina (version 10.15) and Mojave (10.14), specifically. HP's printer driver software, and the Amazon app, are cryptographically signed with a certificate that macOS uses to determine the applications are legit and can be trusted.
However, it seems that certificate, or certificates, have been revoked, perhaps through an XProtect update. This is the mechanism Apple uses to inform Macs to no longer trust and run certain programs, such as ones that turn out to be malware or ones where the signing certificate is compromised or stolen.
There is no central database of revoked certs, there's one for each OS version it seems, so it may be that Apple canned, accidentally or otherwise, the certificates in question for just Catalina and Mojave installations. There is some confusion, as some error messages show the certificates were revoked, and some that the code signature is invalid.
'No questions asked' Windows code cert slingers 'fuel trade' in digitally signed malware [1]READ MORE
In any case, HP's driver software and Amazon's app, at least, no longer work on those two operating system builds. Users are told when trying to print, for instance, that HP's application "will damage your computer," and are given the option to run it anyway or send it to the trash. Trying to continue just loops you back round to the error message, with no work done. Punters are also encouraged to report this "malware" to Apple.
Unofficial workarounds for now include using AirPrint to an HP printer, or uninstalling the HP software and using a generic PostScript driver.
A Reg reader who tipped us off about the blunder told us he was able to jerry rig some IPP connectivity to get an older device to print: "We had a handful of printers where macOS would print into the ether. Windows had no problem. I found some IPP trickery on macOS Catalina worked on an older HP4650."
We had a handful of printers where macOS would print into the ether. Windows had no problem
Complaints from punters are building up on the [2]Apple and [3]HP support forums.
"Trying to open Printer Utility on MacOS 10.15.7 and I get a crash dump every time saying 'Code Signature Invalid' for the binary /Library/Printers/hp/Utilities/HP Utility.app/Contents/MacOS/HP Utility," said one netizen.
"Yes, my Deskjet F4140 abruptly stopped working with both my Mac mini desktop AND my partner's AirBook," complained another. "The AirBook keeps insisting it's malware (it's not), while my desktop says the certificate has expired. Suddenly, HP and Apple are NOT playing well together! I've redownloaded and reinstalled the printer software TWICE now but nothing has changed, just the same message about HP Utility now missing. Our jobs depend on this printer, HP."
Thomas Reed, director of mac & mobile at Malwarebytes, [4]tweeted to say his users were up in arms at the tech breakdown: "We're seeing a significant influx of support cases where users are seeing macOS identify what appear to be legit processes as malware."
Mac blogger Howard Oakley has some more background, [5]here . "You’re seeing that [error] message because macOS is checking the signature on your HP printer software, and being told that its signing certificate has been revoked," he observed.
Spokespeople for HP, Amazon, and Apple were not available for immediate comment. ®
Get our [6]Tech Resources
[1] https://www.theregister.com/2018/06/26/digitally_signed_malware/
[2] https://discussions.apple.com/thread/251948941?page=1
[3] https://h30434.www3.hp.com/t5/Printer-Setup-Software-Drivers/HP-Utility-fails-with-Code-Signature-Invalid-MacOS-10-15-7/td-p/7823883
[4] https://twitter.com/thomasareed/status/1319670995045675008
[5] https://eclecticlight.co/2020/10/23/why-have-my-hp-printers-stopped-working-how-to-check-their-software-signature/
[6] https://whitepapers.theregister.com/
It appears to be a code-signing snafu affecting macOS Catalina (version 10.15) and Mojave (10.14), specifically. HP's printer driver software, and the Amazon app, are cryptographically signed with a certificate that macOS uses to determine the applications are legit and can be trusted.
However, it seems that certificate, or certificates, have been revoked, perhaps through an XProtect update. This is the mechanism Apple uses to inform Macs to no longer trust and run certain programs, such as ones that turn out to be malware or ones where the signing certificate is compromised or stolen.
There is no central database of revoked certs, there's one for each OS version it seems, so it may be that Apple canned, accidentally or otherwise, the certificates in question for just Catalina and Mojave installations. There is some confusion, as some error messages show the certificates were revoked, and some that the code signature is invalid.
'No questions asked' Windows code cert slingers 'fuel trade' in digitally signed malware [1]READ MORE
In any case, HP's driver software and Amazon's app, at least, no longer work on those two operating system builds. Users are told when trying to print, for instance, that HP's application "will damage your computer," and are given the option to run it anyway or send it to the trash. Trying to continue just loops you back round to the error message, with no work done. Punters are also encouraged to report this "malware" to Apple.
Unofficial workarounds for now include using AirPrint to an HP printer, or uninstalling the HP software and using a generic PostScript driver.
A Reg reader who tipped us off about the blunder told us he was able to jerry rig some IPP connectivity to get an older device to print: "We had a handful of printers where macOS would print into the ether. Windows had no problem. I found some IPP trickery on macOS Catalina worked on an older HP4650."
We had a handful of printers where macOS would print into the ether. Windows had no problem
Complaints from punters are building up on the [2]Apple and [3]HP support forums.
"Trying to open Printer Utility on MacOS 10.15.7 and I get a crash dump every time saying 'Code Signature Invalid' for the binary /Library/Printers/hp/Utilities/HP Utility.app/Contents/MacOS/HP Utility," said one netizen.
"Yes, my Deskjet F4140 abruptly stopped working with both my Mac mini desktop AND my partner's AirBook," complained another. "The AirBook keeps insisting it's malware (it's not), while my desktop says the certificate has expired. Suddenly, HP and Apple are NOT playing well together! I've redownloaded and reinstalled the printer software TWICE now but nothing has changed, just the same message about HP Utility now missing. Our jobs depend on this printer, HP."
Thomas Reed, director of mac & mobile at Malwarebytes, [4]tweeted to say his users were up in arms at the tech breakdown: "We're seeing a significant influx of support cases where users are seeing macOS identify what appear to be legit processes as malware."
Mac blogger Howard Oakley has some more background, [5]here . "You’re seeing that [error] message because macOS is checking the signature on your HP printer software, and being told that its signing certificate has been revoked," he observed.
Spokespeople for HP, Amazon, and Apple were not available for immediate comment. ®
Get our [6]Tech Resources
[1] https://www.theregister.com/2018/06/26/digitally_signed_malware/
[2] https://discussions.apple.com/thread/251948941?page=1
[3] https://h30434.www3.hp.com/t5/Printer-Setup-Software-Drivers/HP-Utility-fails-with-Code-Signature-Invalid-MacOS-10-15-7/td-p/7823883
[4] https://twitter.com/thomasareed/status/1319670995045675008
[5] https://eclecticlight.co/2020/10/23/why-have-my-hp-printers-stopped-working-how-to-check-their-software-signature/
[6] https://whitepapers.theregister.com/
Well, some work done at least...
G Mac
"Trying to continue just loops you back round to the error message, with no work done. "
Except for the fraction of a calorie you expended moving the mouse...
six_tymes
macs have been doing this randomly to many programs for decades.
HP and Amazon
RM Myers
Okay, I can understand Apple treating Amazon music as malware, since it is a competitor of Apple Music, which means it can't be trusted, just like non-Apple repair parts. But why HP printers? Is Apple getting back into the printer market? Did HP not give Apple 30% of the revenue for ink for printers connected to Apple devices?
Inquiring minds want to know, etc.
And I'm off before the pitchforks mob gets here.
Not just Apple
Anonymous Coward
W10 updates screwed up printing to HP Laserjets too.
Re: Not just Apple
NetBlackOps
W10 update did a number on my laptop's WiFi. Thanks Microsoft.
Epson weirdness, too
My ancient (not really, though I’m sure Epson thinks so) Work Force 3500 series MFDs are being... strange... today. Some files cannot be printed from a iOS device, some print just the first page of multi page documents, some merely take a very long time to print. Affected files include PDFs, web pages, PNGs, and JPGs. Some also have problems with macOS devices, but not with Windows.
The same items print just fine on Brother devices.
Time to retire the Epsons.