Dear Customers,
NIST (U.S. Department of Commerce’s
National Institute of Standards and Technology) has recommended against the use
of SHA-2 (Secure Hash Algorithm 2) digital certificates and SHA-1 (Secure Hash
Algorithm 1) on June 2016. As a result, Microsoft has decided to end the
support for SHA-1 certificates.
AhnLab has used both SHA-1 and
SHA-2 code signing certificates to ensure the stable operation of its products.
However, as global certificate-issuing organizations cease SHA-1 certificate
issuance and OS support, AhnLab has decided to no longer support product or
engine updates on SHA-2 non-supporting OS as of November 2020. This may, in
some cases, lead to interference with the stable operation of AhnLab’s security
products.
Therefore, it is highly recommended
that businesses and organizations check the type and version of the OS being currently
used for the continuous and stable operation of AhnLab’s security products. Also,
it is advised to upgrade to an OS that supports SHA-2.
※ Microsoft
Windows(PC/Desktop) SHA-2 Support Status
|
OS
|
SHA-2 Support
|
Remarks
|
|
Windows 2000 / XP
|
X
|
|
|
Windows VISTA / VISTA SP1
|
X
|
|
|
Windows VISTA SP2
|
X
|
|
|
Windows 7
|
X
|
|
|
Windows 7 SP1
|
X
|
Supported with Microsoft KB
Package
|
|
Windows 8 / 8.1
|
O
|
|
|
Windows 10
|
O
|
|
- SHA-2 is supported
in Windows 7
ServicePack1 with the following Microsoft KB
package.
à Download KB4490628 and KB4474419
- SHA-2 is supported
in Windows 8, 8.1, 10
※ Microsoft
Windows(Server) SHA-2 Support Status
|
OS
|
SHA-2 Support
|
Remarks
|
|
Windows Server 2000 / 2003
|
X
|
|
|
Windows Server 2008 / 2008 SP1
|
X
|
|
|
Windows Server 2008 SP2
|
X
|
Supported with Microsoft KB
Package
|
|
Windows Server 2008 R2
|
X
|
|
|
Windows Server 2008 R2 SP1
|
X
|
Supported with Microsoft KB
Package
|
|
Windows Server 2012 / 2012 R2
|
O
|
|
|
Windows Server 2016
|
O
|
|
|
Windows Server 2019
|
O
|
|
- SHA-2 is supported
in Windows Server 2008 ServicePack2 and Windows Server 2008 R2
ServicePack1 with the following Microsoft KB package.
à Windows Server 2008 SP2: Download KB4493730 and KB4474419
à Windows Server 2008 R2 SP1: Download KB4490628 and KB4474419
- SHA-2 is supported
in Windows Server 2012, 2012 R2, 2016, 2019
For more information regarding
SHA-2 Code Signing Support for Windows and WSUS, please refer to the
following link.
☞ [Summary] SHA-2 Code Signing Support requirement for
Windows and WSUS
Best Regards,
AhnLab
