Disable Idemia minidriver on ARM64 Windows and add Thales arm64 (#99)

IB-8051

Signed-off-by: Raul Metsma <raul@metsma.ee>

Author: metsma

HyperlinkSidebarTheme.en.wxl

@@ -76,4 +76,5 @@
   <String Id="edgeplugin" Value="Edge authentication and signing support" />
   <String Id="edgepluginpolicy" Value="Edge extension will be activated automatically" />
   <String Id="SupportedWindows" Value="You are using an unsupported operating system. You'll need Windows 10 or later 64-bit operating system to successfully install ID-software." />
+  <String Id="ARM64Warning" Value="ID-cards issued by the Estonian card manufacturer IDEMIA (issued before 11.2025) cannot be used electronically on Windows ARM devices." />
 </WixLocalization>

HyperlinkSidebarTheme.et.wxl

@@ -76,4 +76,5 @@
   <String Id="edgeplugin" Value="Edge isikutuvastamise ja allkirjastamise tugi" />
   <String Id="edgepluginpolicy" Value="Edge laiendus aktiveeritakse automaatselt" />
   <String Id="SupportedWindows" Value="Kasutate mittetoetatud operatsioonisüsteemi. ID-tarkvara paigaldamiseks on vaja Windows 10 või uuemat 64-bitist operatsioonisüsteemi." />
+  <String Id="ARM64Warning" Value="Eesti kaarditootja IDEMIA väljastatud ID-kaarte (väljastatud enne 11.2025) ei saa Windows ARM seadmetes elektroonseteks toiminguteks kasutada." />
 </WixLocalization>

HyperlinkSidebarTheme.xml

@@ -30,6 +30,7 @@
                 <Text Condition="WixStdBASuppressOptionsUI">#(loc.InstallMessage)</Text>
                 <Text Condition="NOT WixStdBASuppressOptionsUI">#(loc.InstallMessageOptions)</Text>
             </Label>
+            <Label X="185" Y="230" Width="-11" Height="69" TabStop="yes" FontId="3" DisablePrefix="yes" VisibleCondition="ARCH=&quot;ARM64&quot;">#(loc.ARM64Warning)</Label>
             <Hypertext X="185" Y="-111" Width="-11" Height="17" TabStop="yes" FontId="3">#(loc.ChangeLogLink)</Hypertext>
             <Hypertext Name="EulaHyperlink" X="185" Y="-111" Width="-11" Height="17" TabStop="yes" FontId="3" HideWhenDisabled="yes">#(loc.InstallLicenseLinkText)</Hypertext>
             <Label Name="InstallVersion" X="185" Y="-81" Width="-11" Height="17" FontId="3" DisablePrefix="yes" VisibleCondition="WixStdBAShowVersion">#(loc.InstallVersion)</Label>

bootstrapper.wxs

@@ -46,9 +46,11 @@
     <util:RegistrySearch Root="HKLM" Key="$(var.REGPath)" Value="AutoUpdate" Variable="AutoUpdate" Condition="AutoUpdateExists" After="AutoUpdateExists" />
     <util:RegistrySearch Root="HKLM" Key="$(var.REGPath)" Value="IconsDesktop" Variable="IconsDesktopExists" Result="exists" Id="IconsDesktopExists" />
     <util:RegistrySearch Root="HKLM" Key="$(var.REGPath)" Value="IconsDesktop" Variable="IconsDesktop" Condition="IconsDesktopExists" After="IconsDesktopExists" />
+    <util:RegistrySearch Id="DetectARM64Processor" Root="HKLM" Result="value" Variable="ARCH"
+      Key="SYSTEM\CurrentControlSet\Control\Session Manager\Environment" Value="PROCESSOR_ARCHITECTURE" />
 
     <Chain>
-      <MsiPackage Id="IDEMIA" InstallCondition="MinidriverInstall = 1" ForcePerMachine="yes"
+      <MsiPackage Id="IDEMIA" InstallCondition="MinidriverInstall = 1 AND NOT ARCH=&quot;ARM64&quot;" ForcePerMachine="yes"
           SourceFile="$(var.idemia)" Compressed="yes">
         <Payload SourceFile="$(var.path)\RemoveAWPBlock.mst" Name="RemoveAWPBlock.mst" Compressed="yes" />
         <MsiProperty Name="TRANSFORMS" Value="RemoveAWPBlock.mst" />
@@ -58,12 +60,20 @@
         <MsiProperty Name="PKCS11" Value="0" />
         <MsiProperty Name="IDPLUG_SERVICES" Value="[InstallCertSynchronizer]" />
       </MsiPackage>
-      <MsiPackage Id="THALES" InstallCondition="MinidriverInstall = 1" ForcePerMachine="yes"
-          SourceFile="$(var.thales)" Compressed="yes">
+      <MsiPackage Id="THALES.X64" InstallCondition="MinidriverInstall = 1 AND NOT ARCH=&quot;ARM64&quot;" ForcePerMachine="yes"
+          SourceFile="$(var.thales_x64)" Compressed="yes">
         <MsiProperty Name="INSTALLFOLDER" Value="[InstallFolder]" />
       </MsiPackage>
-      <MsiPackage Id="THALES.CERTDEL" InstallCondition="MinidriverInstall = 1 AND InstallCertSynchronizer = 1" ForcePerMachine="yes"
-          SourceFile="$(var.thales_certdel)" Compressed="yes">
+      <MsiPackage Id="THALES.ARM64" InstallCondition="MinidriverInstall = 1 AND ARCH=&quot;ARM64&quot;" ForcePerMachine="yes"
+          SourceFile="$(var.thales_arm64)" Compressed="yes">
+        <MsiProperty Name="INSTALLFOLDER" Value="[InstallFolder]" />
+      </MsiPackage>
+      <MsiPackage Id="CERTDEL.X64" InstallCondition="MinidriverInstall = 1 AND InstallCertSynchronizer = 1 AND NOT ARCH=&quot;ARM64&quot;" ForcePerMachine="yes"
+          SourceFile="$(var.certdel_x64)" Compressed="yes">
+        <MsiProperty Name="INSTALLFOLDER" Value="[InstallFolder]" />
+      </MsiPackage>
+      <MsiPackage Id="CERTDEL.ARM64" InstallCondition="MinidriverInstall = 1 AND InstallCertSynchronizer = 1 AND ARCH=&quot;ARM64&quot;" ForcePerMachine="yes"
+          SourceFile="$(var.certdel_arm64)" Compressed="yes">
         <MsiProperty Name="INSTALLFOLDER" Value="[InstallFolder]" />
       </MsiPackage>
 

build.ps1

@@ -9,8 +9,10 @@ param(
    [string]$shellext = (Get-ChildItem "Digidoc_ShellExt*x64.msi"),
    [string]$webeid = (Get-ChildItem "web-eid*x64.msi"),
    [string]$idemia = (Get-ChildItem "idplug-classic-*-Estonia_64bit.msi"),
-   [string]$thales = (Get-ChildItem "SmartCard_Client_*.msi"),
-   [string]$thales_certdel = (Get-ChildItem "CertDelApp_*.msi"),
+   [string]$thales_x64 = (Get-ChildItem "SmartCard_Client_64*.msi"),
+   [string]$thales_arm64 = (Get-ChildItem "SmartCard_Client_arm64*.msi"),
+   [string]$certdel_x64 = (Get-ChildItem "CertDelApp_64*.msi"),
+   [string]$certdel_arm64 = (Get-ChildItem "CertDelApp_arm64*.msi"),
    [string]$sign = $null
 )
 
@@ -24,8 +26,8 @@ if($sign) {
     Sign("$path\RemoveAWPBlock.mst")
 }
 & wix build -nologo -ext WixToolset.BootstrapperApplications.wixext -ext WixToolset.Util.wixext "$path\bootstrapper.wxs" `
-    -d "MSI_VERSION=$msiversion" -d "path=$path" -d "updater=$updater" `
-    -d "idemia=$idemia" -d "thales=$thales" -d "thales_certdel=$thales_certdel" `
+    -d "MSI_VERSION=$msiversion" -d "path=$path" -d "updater=$updater" -d "idemia=$idemia" `
+    -d "thales_x64=$thales_x64" -d "thales_arm64=$thales_arm64" -d "certdel_x64=$certdel_x64" -d "certdel_arm64=$certdel_arm64" `
     -d "webeid=$webeid" -d "qdigidoc4=$qdigidoc4" -d "shellext=$shellext" -out "$filename.exe"
 if($sign) {
     & wix burn detach -nologo "$filename.exe" -engine "$filename.engine.exe"