Notice

[Notice] End of Support for SHA-1 Code Signing Certificates

  • Date07-09-2020
  • Hit3502

Dear Customers,

 

NIST (U.S. Department of Commerce’s National Institute of Standards and Technology) has recommended against the use of SHA-2 (Secure Hash Algorithm 2) digital certificates and SHA-1 (Secure Hash Algorithm 1) on June 2016. As a result, Microsoft has decided to end the support for SHA-1 certificates.

 

AhnLab has used both SHA-1 and SHA-2 code signing certificates to ensure the stable operation of its products. However, as global certificate-issuing organizations cease SHA-1 certificate issuance and OS support, AhnLab has decided to no longer support product or engine updates on SHA-2 non-supporting OS as of November 2020. This may, in some cases, lead to interference with the stable operation of AhnLab’s security products.

 

Therefore, it is highly recommended that businesses and organizations check the type and version of the OS being currently used for the continuous and stable operation of AhnLab’s security products. Also, it is advised to upgrade to an OS that supports SHA-2.

 

 

 Microsoft Windows(PC/Desktop) SHA-2 Support Status

OS

SHA-2 Support

Remarks

Windows 2000 / XP

X

 

Windows VISTA / VISTA SP1

X

 

Windows VISTA SP2

X

 

Windows 7

X

 

Windows 7 SP1

X

Supported with Microsoft KB Package

Windows 8 / 8.1

O

 

Windows 10

O

 

-       SHA-2 is supported in Windows 7 ServicePack1 with the following Microsoft KB package.
    
à Download KB4490628 and KB4474419 

-       SHA-2 is supported in Windows 8, 8.1, 10

 

 

 Microsoft Windows(Server) SHA-2 Support Status

OS

SHA-2 Support

Remarks

Windows Server 2000 / 2003

X

 

Windows Server 2008 / 2008 SP1

X

 

Windows Server 2008 SP2

X

Supported with Microsoft KB Package

Windows Server 2008 R2

X

 

Windows Server 2008 R2 SP1

X

Supported with Microsoft KB Package

Windows Server 2012 / 2012 R2

O

 

Windows Server 2016

O

 

Windows Server 2019

O

 

-       SHA-2 is supported in Windows Server 2008 ServicePack2 and Windows Server 2008 R2 ServicePack1 with the following Microsoft KB package.

à Windows Server 2008 SP2: Download KB4493730 and KB4474419 

à Windows Server 2008 R2 SP1: Download KB4490628 and KB4474419 

-       SHA-2 is supported in Windows Server 2012, 2012 R2, 2016, 2019

 

 

For more information regarding SHA-2 Code Signing Support for Windows and WSUS, please refer to the following link.

[Summary] SHA-2 Code Signing Support requirement for Windows and WSUS

 

Best Regards,

AhnLab

 ​